GHSA-qc84-pr5g-62fj

Facts

Severity

High · CVSS score 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected versions (snowflake-sdk)

< 3.3.0As entered by the maintainer. Not reviewed.

Fixed in (snowflake-sdk)

3.3.0

Affected versions (snowflake-connector-python)

< 4.7.3As entered by the maintainer. Not reviewed.

Fixed in (snowflake-connector-python)

4.7.3

Affected versions (github.com/snowflakedb/gosnowflake)

>= 1.0.0As entered by the maintainer. Not reviewed.

Fixed in (github.com/snowflakedb/gosnowflake)

not stated

Affected versions (net.snowflake:snowflake-jdbc)

< 4.3.4As entered by the maintainer. Not reviewed.

Fixed in (net.snowflake:snowflake-jdbc)

4.3.4

Affected versions (net.snowflake:snowflake-jdbc-thin)

< 4.3.4As entered by the maintainer. Not reviewed.

Fixed in (net.snowflake:snowflake-jdbc-thin)

4.3.4

Affected versions (net.snowflake:snowflake-jdbc-fips)

< 4.3.4As entered by the maintainer. Not reviewed.

Fixed in (net.snowflake:snowflake-jdbc-fips)

4.3.4

Affected versions (github.com/snowflakedb/gosnowflake/v2)

< 2.2.0As entered by the maintainer. Not reviewed.

Fixed in (github.com/snowflakedb/gosnowflake/v2)

2.2.0

CVE

CVE-2026-85525 · published

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-09-10 17:42 UTC

   Published by the maintainers

   Cites CVE-2026-85525

2. 2026-10-28 08:44 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-qc84-pr5g-62fj.json