{"schemaVersion":3,"id":"CVE-2026-86597","aliases":["GHSA-qqj6-54q6-cxv6","GO-2026-6665","CGA-53pc-h425-m79w","CGA-545m-pxcp-gv8h","CGA-6vq4-ph6c-f83v","CGA-93x5-7628-ppw6","CGA-f2hf-26rp-9wc3","CGA-hjwq-8vpp-6wq5","CGA-j9x5-c7r5-wjfh","CGA-rw27-wg39-r8hj","CGA-w9cf-rm72-445p","CGA-x6xx-cg3q-m4fp","CGA-2qj8-46pf-vcp8","CGA-2wfp-p6vc-4fh8","CGA-33v2-h8g2-8mm9","CGA-35c6-3vx2-72r7","CGA-36mc-m5gf-fjv8","CGA-3cg9-gv2p-f62j","CGA-3cpm-44mx-mwq5","CGA-4m32-364h-3cr4","CGA-58ww-v967-75xp","CGA-5px5-vhv5-j699","CGA-89v9-mv9f-fh87","CGA-8qjr-8rhx-79cg","CGA-cjqj-f5xh-274p","CGA-fvj6-vg35-8v52","CGA-gpmx-cwmq-g4v8","CGA-jmmr-56xf-wqx9","CGA-jvw2-h567-vgh7","CGA-m29x-q6mm-6f86","CGA-m4cc-7mfh-6w59","CGA-p82v-2564-qcv3","CGA-pcp4-26gg-h3p7","CGA-pqg3-679g-42mr","CGA-qhvx-rpvj-qc2j","CGA-r636-276w-qxqm","CGA-rg2w-c259-3pmh","CGA-rv93-5859-4c24","CGA-w6h2-2h9w-v677","CGA-xxh2-p8cw-5f4c","PYSEC-2026-4301","CGA-28pg-rjrv-753h","CGA-3xvc-3mrx-rx98","CGA-h6v2-25hf-86x6","CGA-xmxr-3grw-57jf"],"status":"published","duplicateOf":null,"title":null,"description":"Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the available log redaction did not cover all affected log paths and data types. An attacker with read access to the log destination, whether the local filesystem, a log aggregation service, or a CI/CD artifact store, could obtain credentials and decryption keys that, if still valid at the time of access, could be used to authenticate to the corresponding Snowflake account or cloud-storage object. Successful exploitation requires read access to the log destination, and impact is bounded by credential lifetime and object scope. The fix is available in Snowflake Connector for Python v4.7.3, Snowflake Go Driver v2.2.0, Snowflake JDBC Driver v4.3.4 (including the snowflake-jdbc-fips and snowflake-jdbc-thin), Snowflake Node.js Driver v3.3.0, Snowflake PHP PDO Driver v4.2.0, and Snowflake ODBC Driver v3.20.0. Users must manually upgrade and should securely delete previously generated diagnostic logs containing sensitive information where retention is not required.","dates":{"published":"2026-09-08T08:24:15.020Z","modified":"2026-09-10T15:37:52.230Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":5.1,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00089,"percentile":0.00394,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.0019999999999999944,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00087},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00089,"percentile":0.00394}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00087,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00121,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00089,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00089,"percentile":0.00394}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-532","name":"Insertion of Sensitive Information into Log File","description":"The product writes sensitive information to a log file.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/532.html"}],"affected":[{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-expanso-edge","name":"commercial-expanso-edge","label":"commercial-expanso-edge","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-expanso-edge","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.77-core-integrations","name":"datadog-agent-fips-7.77-core-integrations","label":"datadog-agent-fips-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"google-cloud-otel-ops-collector","name":"google-cloud-otel-ops-collector","label":"google-cloud-otel-ops-collector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/google-cloud-otel-ops-collector","purlType":"apk","versions":[{"text":"< 0.160.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.160.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-alloy","name":"grafana-alloy","label":"grafana-alloy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-alloy","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.21.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.21.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"grafana-alloy-fips","name":"grafana-alloy-fips","label":"grafana-alloy-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/grafana-alloy-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.21.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.21.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jitsucom-bulker-bulker","name":"jitsucom-bulker-bulker","label":"jitsucom-bulker-bulker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jitsucom-bulker-bulker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"jitsucom-bulker-sidecar","name":"jitsucom-bulker-sidecar","label":"jitsucom-bulker-sidecar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/jitsucom-bulker-sidecar","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nrdot-collector","name":"nrdot-collector","label":"nrdot-collector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nrdot-collector","purlType":"apk","versions":[{"text":"< 2.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.37","name":"telegraf-1.37","label":"telegraf-1.37","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.37","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.38","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.39","name":"telegraf-1.39","label":"telegraf-1.39","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.39","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-1.21","name":"vault-1.21","label":"vault-1.21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-1.21","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-2.0","name":"vault-2.0","label":"vault-2.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-2.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-2.1","name":"vault-2.1","label":"vault-2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-2.2","name":"vault-2.2","label":"vault-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-2.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-fips-1.21","name":"vault-fips-1.21","label":"vault-fips-1.21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-fips-1.21","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-fips-2.0","name":"vault-fips-2.0","label":"vault-fips-2.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-fips-2.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-fips-2.1","name":"vault-fips-2.1","label":"vault-fips-2.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-fips-2.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vault-fips-2.2","name":"vault-fips-2.2","label":"vault-fips-2.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vault-fips-2.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"grafana-alloy","name":"grafana-alloy","label":"grafana-alloy","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/grafana-alloy","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.21.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.21.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jitsucom-bulker-bulker","name":"jitsucom-bulker-bulker","label":"jitsucom-bulker-bulker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jitsucom-bulker-bulker","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"jitsucom-bulker-sidecar","name":"jitsucom-bulker-sidecar","label":"jitsucom-bulker-sidecar","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/jitsucom-bulker-sidecar","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.38","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/snowflakedb","product":"gosnowflake","name":"github.com/snowflakedb/gosnowflake","label":"gosnowflake","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/snowflakedb/gosnowflake","purlType":"golang","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"≤ 1.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | ≤ 1.19.1","eol":null,"hubHref":null},{"vendor":"github.com/snowflakedb/gosnowflake","product":"v2","name":"github.com/snowflakedb/gosnowflake/v2","label":"v2","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/snowflakedb/gosnowflake/v2","purlType":"golang","versions":[{"text":"< 2.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.0","eol":null,"hubHref":null},{"vendor":"net.snowflake","product":"snowflake-jdbc","name":"net.snowflake:snowflake-jdbc","label":"snowflake-jdbc","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/net.snowflake/snowflake-jdbc","purlType":"maven","versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":null},{"vendor":"net.snowflake","product":"snowflake-jdbc-fips","name":"net.snowflake:snowflake-jdbc-fips","label":"snowflake-jdbc-fips","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/net.snowflake/snowflake-jdbc-fips","purlType":"maven","versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":null},{"vendor":"net.snowflake","product":"snowflake-jdbc-thin","name":"net.snowflake:snowflake-jdbc-thin","label":"snowflake-jdbc-thin","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/net.snowflake/snowflake-jdbc-thin","purlType":"maven","versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":null},{"vendor":"Npm","product":"snowflake-sdk","name":"snowflake-sdk","label":"snowflake-sdk","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/snowflake-sdk","purlType":"npm","versions":[{"text":"< 3.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0","eol":null,"hubHref":null},{"vendor":"PyPI","product":"snowflake-connector-python","name":"snowflake-connector-python","label":"snowflake-connector-python","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/snowflake-connector-python","purlType":"pypi","versions":[{"text":"< 4.7.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.3","eol":null,"hubHref":null},{"vendor":"snowflake","product":"snowflake connector for python","name":"Snowflake Connector for Python","label":"snowflake connector for python","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.7.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.7.3","eol":null,"hubHref":"/vendor/snowflake/snowflake_connector_for_python"},{"vendor":"snowflake","product":"snowflake go driver","name":"Snowflake Go Driver","label":"snowflake go driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.19.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.19.1 | ≥ 2.0.0, < 2.2.0","eol":null,"hubHref":"/vendor/snowflake/snowflake_go_driver"},{"vendor":"snowflake","product":"snowflake jdbc driver","name":"Snowflake JDBC Driver","label":"snowflake jdbc driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":"/vendor/snowflake/snowflake_jdbc_driver"},{"vendor":"snowflake","product":"snowflake jdbc driver (fips)","name":"Snowflake JDBC Driver (FIPS)","label":"snowflake jdbc driver (fips)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":"/vendor/snowflake/snowflake_jdbc_driver_fips"},{"vendor":"snowflake","product":"snowflake jdbc driver (thin)","name":"Snowflake JDBC Driver (Thin)","label":"snowflake jdbc driver (thin)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 4.3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.4","eol":null,"hubHref":"/vendor/snowflake/snowflake_jdbc_driver_thin"},{"vendor":"snowflake","product":"snowflake node.js driver","name":"Snowflake Node.js Driver","label":"snowflake node.js driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0","eol":null,"hubHref":"/vendor/snowflake/snowflake_nodejs_driver"},{"vendor":"snowflake","product":"snowflake odbc driver","name":"Snowflake ODBC Driver","label":"snowflake odbc driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.16.0, < 3.20.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.16.0, < 3.20.0","eol":null,"hubHref":"/vendor/snowflake/snowflake_odbc_driver"},{"vendor":"snowflake","product":"snowflake php pdo driver","name":"Snowflake PHP PDO Driver","label":"snowflake php pdo driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.4.0, < 4.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.4.0, < 4.2.0","eol":null,"hubHref":"/vendor/snowflake/snowflake_php_pdo_driver"}],"affectedCount":41,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3","label":"github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3","hostname":"github.com","tags":["WEB"]},{"url":"https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026","label":"docs.snowflake.com/en/release-notes/clients-drivers/golang-2026","hostname":"docs.snowflake.com","tags":["WEB"]},{"url":"https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026#version-434-sep-03-2026","label":"docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026","hostname":"docs.snowflake.com","tags":["WEB"]},{"url":"https://docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026#version-330-september-3-2026","label":"docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026","hostname":"docs.snowflake.com","tags":["WEB"]},{"url":"https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-420-sep-3-2026","label":"docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026","hostname":"docs.snowflake.com","tags":["WEB"]},{"url":"https://docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026#version-3200-sep-3-2026","label":"docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026","hostname":"docs.snowflake.com","tags":["WEB"]},{"url":"https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6","label":"github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6","hostname":"github.com","tags":["WEB","Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86597","label":"nvd.nist.gov/vuln/detail/CVE-2026-86597","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/snowflakedb/snowflake-connector-nodejs","label":"github.com/snowflakedb/snowflake-connector-nodejs","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://pkg.go.dev","label":"pkg.go.dev","hostname":"pkg.go.dev","tags":["WEB"]},{"url":"https://pypi.org","label":"pypi.org","hostname":"pypi.org","tags":["WEB"]},{"url":"https://registry.npmjs.org","label":"registry.npmjs.org","hostname":"registry.npmjs.org","tags":["WEB"]},{"url":"https://repo.maven.apache.org/maven2","label":"repo.maven.apache.org/maven2","hostname":"repo.maven.apache.org","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86597.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86597.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/snowflakedb/gosnowflake","label":"github.com/snowflakedb/gosnowflake","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/snowflakedb/pdo_snowflake","label":"github.com/snowflakedb/pdo_snowflake","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/snowflakedb/snowflake-connector-python","label":"github.com/snowflakedb/snowflake-connector-python","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/snowflakedb/snowflake-jdbc","label":"github.com/snowflakedb/snowflake-jdbc","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a","label":"github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a","hostname":"github.com","tags":["FIX"]},{"url":"https://github.com/snowflakedb/gosnowflake/pull/1844","label":"github.com/snowflakedb/gosnowflake/pull/1844","hostname":"github.com","tags":["FIX"]},{"url":"https://pypi.org/project/snowflake-connector-python","label":"pypi.org/project/snowflake-connector-python","hostname":"pypi.org","tags":["PACKAGE"]},{"url":"https://github.com/advisories/GHSA-qqj6-54q6-cxv6","label":"github.com/advisories/GHSA-qqj6-54q6-cxv6","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":["GHSA-5CWM-P7PJ-GQP2"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-08T08:24:15.020Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-10T15:37:52.230Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T15:22:27.161Z","stale":false,"partial":false}}