snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-42965 · ADVISORY
• snowflakedb/snowflake-connector-python#1327 · WEB
• snowflakedb/snowflake-connector-python commit b9d2fc7 · WEB
• snowflakedb/snowflake-connector-python · PACKAGE
• snowflakedb/snowflake-connector-python release v2.8.2 · WEB
• research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185 · WEB
• research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185 · Exploit
• pypi.org/project/snowflake-connector-python · PACKAGE
• GitHub Advisory GHSA-4r6j-fwcx-94cf · ADVISORY

Lỗ hổng khác của snowflake-connector-python

• CVE-2026-86597TRUNG BÌNH 6.5Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authenticati…
• CVE-2026-15925NGHIÊM TRỌNG 9.2Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positione…
• CVE-2025-24795TRUNG BÌNH 5.5The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…
• CVE-2025-24794CAO 7.8The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…
• CVE-2025-24793CAO 7.0The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all st…