Vulnerabilities for snowflake-connector-python

First version without a known vulnerability: 3.13.1

Details

• GHSA-2vpq-fh52-j3wv2025-01-29

  snowflake-connector-python vulnerable to SQL Injection in write_pandas

  Fixed in: 3.13.1, f3f9b666518d29c31a49384bbaa9a65889e72056

• GHSA-m4f6-vcj4-w5mx2025-01-29

  snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache

  Fixed in: 3.13.1, 3769b43822357c3874c40f5e74068458c2dc79af

• GHSA-r2x6-cjg7-8r432025-01-29

  snowflake-connector-python vulnerable to insecure cache files permissions

  Fixed in: 3.13.1, 3769b43822357c3874c40f5e74068458c2dc79af

• GHSA-5vvg-pvhp-hv2m2024-10-24

  The Snowflake Connector for Python stores sensitive data in logs

  Fixed in: 3.12.3, dbc9284a3c0382c131b971b35e8d6ab93c46f37a

• GHSA-5w5m-pfw9-c8fp2023-06-09

  Snowflake Python Connector vulnerable to Command Injection

  Fixed in: 3.0.2, 1cdbd3b1403c5ef520d7f4d9614fe35165e101ac

• GHSA-4r6j-fwcx-94cf2022-11-10

  snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

  Fixed in: 2.8.2