Snowflake Connector for Python vulnerabilities
4 known vulnerabilities in Snowflake Connector for Python from Snowflake. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Snowflake Connector for Python: Improper Neutralization of Special Elements used in an SQL Command
When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python (Universal Core) did not escape DataFrame column names before i
- 8.2 High severity
Snowflake Connector for Python: Unintended Proxy or Intermediary
In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configur
- 7.4 High severity
Snowflake Connector for Python: Improper Certificate Validation
Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification fa
- 9.2 Critical severity
Snowflake Connector for Python: Improper Validation of Certificate with Host Mismatch
Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-pat