How many CVEs does snowflakedb snowflake-connector-python have?

snowflakedb snowflake-connector-python has 7 published CVE records since 2022.

How many snowflakedb snowflake-connector-python CVEs are in CISA KEV?

None of snowflakedb snowflake-connector-python's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for snowflakedb snowflake-connector-python vulnerabilities?

Yes — 2 of snowflakedb snowflake-connector-python's CVEs have a known public exploit.

Which versions of snowflakedb snowflake-connector-python are affected?

180 distinct snowflakedb snowflake-connector-python versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in snowflakedb snowflake-connector-python CVEs?

snowflakedb snowflake-connector-python's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-276 (Incorrect Default Permissions), CWE-297 (Improper Validation of Certificate with Host Mismatch), CWE-502 (Deserialization of Untrusted Data).

What is the average severity of snowflakedb snowflake-connector-python CVEs?

The average CVSS base score across snowflakedb snowflake-connector-python's scored CVEs is 7.3.

snowflakedb snowflake-connector-python Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every snowflakedb snowflake-connector-python version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.7.125 CVEs
2.8.05 CVEs
2.8.15 CVEs
2.2.104 CVEs
2.2.54 CVEs
2.2.64 CVEs
2.2.74 CVEs
2.2.84 CVEs
2.2.94 CVEs
2.3.04 CVEs
2.3.14 CVEs
2.3.104 CVEs
2.3.24 CVEs
2.3.44 CVEs
2.3.84 CVEs
2.4.04 CVEs
2.4.14 CVEs
2.4.24 CVEs
2.4.34 CVEs
2.4.44 CVEs
2.4.64 CVEs
2.5.04 CVEs
2.6.14 CVEs
2.7.04 CVEs
2.7.104 CVEs
2.7.114 CVEs
2.7.24 CVEs
2.7.34 CVEs
2.7.44 CVEs
2.7.54 CVEs
2.7.64 CVEs
2.7.74 CVEs
2.7.84 CVEs
2.7.94 CVEs
2.8.24 CVEs
2.8.34 CVEs
2.9.04 CVEs
3.0.04 CVEs
3.0.14 CVEs
1.3.103 CVEs
1.3.113 CVEs
1.3.123 CVEs
1.3.133 CVEs
1.3.143 CVEs
1.3.163 CVEs
1.3.173 CVEs
1.3.183 CVEs
1.3.83 CVEs
1.3.93 CVEs
1.4.03 CVEs
1.4.13 CVEs
1.4.103 CVEs
1.4.113 CVEs
1.4.123 CVEs
1.4.133 CVEs
1.4.143 CVEs
1.4.153 CVEs
1.4.163 CVEs
1.4.173 CVEs
1.4.23 CVEs
1.4.33 CVEs
1.4.43 CVEs
1.4.53 CVEs
1.4.63 CVEs
1.4.73 CVEs
1.4.83 CVEs
1.4.93 CVEs
1.5.03 CVEs
1.5.13 CVEs
1.5.33 CVEs
1.5.43 CVEs
1.5.53 CVEs
1.5.63 CVEs
1.5.73 CVEs
1.5.83 CVEs
1.6.03 CVEs
1.6.13 CVEs
1.6.103 CVEs
1.6.113 CVEs
1.6.123 CVEs
1.6.23 CVEs
1.6.33 CVEs
1.6.43 CVEs
1.6.53 CVEs
1.6.63 CVEs
1.6.73 CVEs
1.6.83 CVEs
1.6.93 CVEs
1.7.03 CVEs
1.7.13 CVEs
1.7.103 CVEs
1.7.23 CVEs
1.7.33 CVEs
1.7.43 CVEs
1.7.53 CVEs
1.7.63 CVEs
1.7.73 CVEs
1.7.83 CVEs
1.7.93 CVEs
1.8.03 CVEs
1.8.13 CVEs
1.8.23 CVEs
1.8.33 CVEs
1.8.43 CVEs
1.8.53 CVEs
1.8.63 CVEs
1.8.73 CVEs
1.9.03 CVEs
2.0.03 CVEs
2.0.13 CVEs
2.0.23 CVEs
2.0.33 CVEs
2.0.43 CVEs
2.1.03 CVEs
2.1.13 CVEs
2.1.23 CVEs
2.1.33 CVEs
2.2.03 CVEs
2.2.13 CVEs
2.2.23 CVEs
2.2.33 CVEs
2.2.43 CVEs
2.253 CVEs
3.0.23 CVEs
3.0.33 CVEs
3.0.43 CVEs
3.1.03 CVEs
3.1.13 CVEs
3.10.03 CVEs
3.11.03 CVEs
3.12.03 CVEs
3.12.13 CVEs
3.12.23 CVEs
3.2.03 CVEs
3.2.13 CVEs
3.3.03 CVEs
3.3.13 CVEs
3.4.03 CVEs
3.4.13 CVEs
3.5.03 CVEs
3.6.03 CVEs
3.7.03 CVEs
3.7.13 CVEs
3.8.13 CVEs
3.9.03 CVEs
3.9.13 CVEs
v.1.7.113 CVEs
3.12.32 CVEs
3.12.42 CVEs
3.13.02 CVEs
3.17.41 CVE
3.18.01 CVE
4.0.01 CVE
4.1.01 CVE
4.1.11 CVE
4.2.01 CVE
4.3.01 CVE
4.4.01 CVE
4.5.01 CVE
4.6.01 CVE
4.7.01 CVE

Version ranges

< 2.8.21 CVE
< 3.0.21 CVE
< 3.12.31 CVE
>= 2.2.5, < 3.13.11 CVE
>= 2.3.7, < 3.13.11 CVE
>= 2.7.12, < 3.13.11 CVE
2.2.5 <= v < 3.13.11 CVE
2.3.7 <= v < 3.13.11 CVE
2.7.12 <= v < 3.13.11 CVE

Fixed in

3.13.13 CVEs
51bd4842f9e282e98706ca9736d169fd8f3626633 CVEs
0f913d800e252ec6470218f8c28a720fa4ef9d701 CVE
2.8.21 CVE
3.0.21 CVE
3.12.31 CVE
9f9c71ed98e80b7547d28021d04cac7c7b3c677a1 CVE
af8c3923b909a0e3e0429fb6490f3a2174b4ef4e1 CVE
d016d816ee80095ecbd590cdb1fb090510d78be71 CVE
eda6206855f5792a0d6a5a315b4758c5c12bdeff1 CVE

Find a version

7 CVEs

Sort

Improper TLS Hostname Verification in Snowflake Connector for Python
CVE-2026-15925
Patch
CWE-297
Critical · CVSS 9.2
EPSS 0.2% (8th pct)2026-07-16
The Snowflake Connector for Python uses insecure cache files permissions
CVE-2025-24795
Patch
CWE-276
Medium · CVSS 5.5
EPSS 0.1% (4th pct)2025-01-29
The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache
CVE-2025-24794
Patch
CWE-502
High · CVSS 7.8
EPSS 0.2% (16th pct)2025-01-29
Snowflake Connector for Python has an SQL Injection in write_pandas
CVE-2025-24793
Patch
CWE-89
High · CVSS 7.0
EPSS 0.3% (22th pct)2025-01-29
Medium vulnerability · 2024-10-24
CVE-2024-49750
Patch
CWE-532
Medium · CVSS 5.5
EPSS 0.2% (11th pct)2024-10-24
High vulnerability · 2023-06-08
CVE-2023-34233
Public exploit
Patch
CWE-77
High · CVSS 8.5
EPSS 1.8% (77th pct)2023-06-08
High vulnerability · 2022-11-09
CVE-2022-42965
Public exploit
Patch
CWE-1333
High · CVSS 7.5
EPSS 0.8% (53th pct)2022-11-09

snowflakedb snowflake-connector-python Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other snowflakedb products

Frequently asked questions

References

Track snowflakedb snowflake-connector-python vulnerabilities