{"id":2924981,"name":"snowflake-connector-python","ecosystem":"pypi","description":"Snowflake DB driver for Python","homepage":"https://github.com/snowflakedb/drivers","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/snowflakedb/drivers","keywords_array":["api","database","dbapi","pep249","python","snowflake"],"namespace":null,"versions_count":199,"first_release_published_at":"2017-06-01T18:02:59.000Z","latest_release_published_at":"2026-10-21T21:32:06.000Z","latest_release_number":"5.1.0","latest_published_release_number":"5.1.0","last_synced_at":"2026-11-02T01:23:18.673Z","created_at":"2022-04-10T12:39:26.596Z","updated_at":"2026-11-02T16:22:35.499Z","registry_url":"https://pypi.org/project/snowflake-connector-python/","install_command":"pip install snowflake-connector-python --index-url https://pypi.org/simple","documentation_url":"https://github.com/snowflakedb/drivers/blob/main/README.md","metadata":{"funding":null,"documentation":"https://github.com/snowflakedb/drivers/blob/main/README.md","classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Free Threading :: 2 - Beta","Topic :: Database","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"snowflake-connector-python","project_status":null},"repo_metadata":{"id":328795943,"uuid":"1003572824","full_name":"snowflakedb/drivers","owner":"snowflakedb","description":"Snowflake drivers monorepo","archived":false,"fork":false,"pushed_at":"2026-10-29T12:09:54.000Z","size":72107,"stargazers_count":15,"open_issues_count":25,"forks_count":12,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-10-29T22:37:27.443Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/snowflakedb.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":".github/copilot-instructions.md","dco":null,"cla":null,"disclosure":null}},"created_at":"2025-06-17T10:54:08.000Z","updated_at":"2026-10-29T12:09:59.000Z","dependencies_parsed_at":"2026-09-28T17:38:48.918Z","dependency_job_id":null,"html_url":"https://github.com/snowflakedb/drivers","commit_stats":null,"previous_names":["snowflakedb/universal-driver","snowflakedb/drivers"],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/snowflakedb/drivers","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/snowflakedb","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/sbom","scorecard":null,"funding_links":[],"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":346510206,"owners_count":38563233,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-29T02:00:07.416Z","response_time":114,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"snowflakedb","name":"Snowflake","uuid":"6453780","kind":"organization","description":"","email":null,"website":"https://snowflake.com","location":"In the ☁","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6453780?v=4","repositories_count":66,"last_synced_at":"2026-10-22T13:46:17.843Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/snowflakedb","funding_links":[],"total_stars":5363,"followers":1671,"following":0,"created_at":"2022-11-02T16:40:57.562Z","updated_at":"2026-10-22T13:46:17.857Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/snowflakedb","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/snowflakedb/repositories"},"tags":[{"name":"snowflake-odbc/4.0.0-rc4","sha":"32639ce337b14e55607bc22c88a827d2c2fb2949","kind":"commit","published_at":"2026-09-17T11:59:33.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/4.0.0-rc4","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/4.0.0-rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F4.0.0-rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc4/manifests","release_url":null},{"name":"snowflake-jdbc/0.0.4","sha":"0edd11d4ba677cbaee65668a6d3dcbdcbd589a04","kind":"commit","published_at":"2026-09-16T09:52:45.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-jdbc/0.0.4","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-jdbc/0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-jdbc%2F0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.4/manifests","release_url":null},{"name":"snowflake-odbc/4.0.0-rc3","sha":"e037015f7c8c21f2363c4133129d2ef493c7b3ae","kind":"commit","published_at":"2026-09-10T13:10:25.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/4.0.0-rc3","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/4.0.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F4.0.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc3/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0rc3","sha":"19ed59f11800d7ead2b29e5f1ee9ac2e1d400bf4","kind":"commit","published_at":"2026-09-10T10:45:02.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0rc3","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc3/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0rc2","sha":"cfb076a84e94c86d169dc8cfd84e52fb08b766d5","kind":"commit","published_at":"2026-09-03T13:35:40.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0rc2","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc2/manifests","release_url":null},{"name":"snowflake-jdbc/0.0.3","sha":"c596ca64d9089589cb1f1210d901b6ae6a7ced77","kind":"commit","published_at":"2026-09-02T14:14:10.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-jdbc/0.0.3","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-jdbc/0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-jdbc%2F0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.3/manifests","release_url":null},{"name":"snowflake-odbc/4.0.0-rc2","sha":"c4af9dcb064ada17d4627dd4ac55011c7f14a8b3","kind":"commit","published_at":"2026-09-01T13:02:37.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/4.0.0-rc2","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/4.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F4.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc2/manifests","release_url":null},{"name":"snowflake-jdbc/0.0.2","sha":"1ec5f2f40434657e6c986cd721f2b6388f0a4a79","kind":"commit","published_at":"2026-08-19T14:57:16.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-jdbc/0.0.2","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-jdbc/0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-jdbc%2F0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.2/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0rc1","sha":"940d251651e64be71b620bd6070fb05ce0a0c40d","kind":"commit","published_at":"2026-08-19T12:22:52.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0rc1","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0rc1/manifests","release_url":null},{"name":"snowflake-odbc/4.0.0-rc1","sha":"da8d7c96a048c878549a123d536017012ee36ce4","kind":"commit","published_at":"2026-08-18T14:49:39.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/4.0.0-rc1","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/4.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F4.0.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F4.0.0-rc1/manifests","release_url":null},{"name":"snowflake-odbc/0.0.9","sha":"6a583e3b1cb14ec8abb4471b7842ae11e8f66a71","kind":"commit","published_at":"2026-08-10T20:47:40.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.9","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.9/manifests","release_url":null},{"name":"snowflake-odbc/0.0.8","sha":"a518ee4ef5b69aab5c1eaa297422c9d2c52898ef","kind":"commit","published_at":"2026-07-31T11:16:25.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.8","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.8/manifests","release_url":null},{"name":"snowflake-jdbc/0.0.1","sha":"e714aceb4eddade8aa79c7136e460019dafe58a8","kind":"commit","published_at":"2026-07-29T11:45:47.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-jdbc/0.0.1","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-jdbc/0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-jdbc%2F0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-jdbc%2F0.0.1/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b6","sha":"9b07f0b52dcd909dcc6530921b071d5c71445a21","kind":"commit","published_at":"2026-07-23T10:10:54.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b6","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b6/manifests","release_url":null},{"name":"snowflake-odbc/0.0.7","sha":"968c6cf567dfff438644e1abecce0c2a2897cfc1","kind":"commit","published_at":"2026-07-23T06:55:01.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.7","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.7/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b5","sha":"46469ab9a07bbe77a51af334a20af1d56954fc6e","kind":"commit","published_at":"2026-07-16T11:28:55.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b5","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b5/manifests","release_url":null},{"name":"snowflake-odbc/0.0.6","sha":"ba2a470fd00fda7b46b537f3b0c38757e8e10385","kind":"commit","published_at":"2026-07-15T15:19:57.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.6","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.6/manifests","release_url":null},{"name":"snowflake-odbc/0.0.5","sha":"7017e173950c8baac1ca7f487b573aa802d0daa9","kind":"commit","published_at":"2026-07-09T12:16:34.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.5","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.5/manifests","release_url":null},{"name":"snowflake-odbc/0.0.4","sha":"e3890b2261012056f5b6f21ec628546c69013fd8","kind":"commit","published_at":"2026-07-01T13:47:53.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.4","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.4/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b4","sha":"919d83f84e7424616559284e3d463f626fc27d39","kind":"commit","published_at":"2026-07-01T12:03:09.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b4","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b4/manifests","release_url":null},{"name":"snowflake-odbc/0.0.3","sha":"df0c8ade9abc91a87befd986796d7fb6e68ed83f","kind":"commit","published_at":"2026-06-18T10:04:28.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.3","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.3/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b3","sha":"df0c8ade9abc91a87befd986796d7fb6e68ed83f","kind":"commit","published_at":"2026-06-18T10:04:28.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b3","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b3/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b2","sha":"7ae3f193247908da0de7bbfe8b20125d30f8c6cc","kind":"commit","published_at":"2026-05-21T07:23:28.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b2","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b2/manifests","release_url":null},{"name":"snowflake-odbc/0.0.2","sha":"af562c1c482efe2f1bf91148c3e8a521bf6339dd","kind":"commit","published_at":"2026-05-21T07:23:13.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.2","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.2/manifests","release_url":null},{"name":"snowflake-connector-python/5.0.0b1","sha":"166b482288f7933df1d84a8389a4b0bf34d1c81c","kind":"commit","published_at":"2026-04-30T09:55:22.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-connector-python/5.0.0b1","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-connector-python/5.0.0b1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-connector-python%2F5.0.0b1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-connector-python%2F5.0.0b1/manifests","release_url":null},{"name":"snowflake-odbc/0.0.1","sha":"5bfe744c93ff2a3ef186e9fd292504f970c01d17","kind":"commit","published_at":"2026-04-29T14:38:25.000Z","download_url":"https://codeload.github.com/snowflakedb/drivers/tar.gz/snowflake-odbc/0.0.1","html_url":"https://github.com/snowflakedb/drivers/releases/tag/snowflake-odbc/0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/snowflakedb/drivers@snowflake-odbc%2F0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/tags/snowflake-odbc%2F0.0.1/manifests","release_url":null}]},"repo_metadata_updated_at":"2026-10-29T22:38:11.803Z","dependent_packages_count":185,"downloads":99504889,"downloads_period":"last-month","dependent_repos_count":2411,"rankings":{"downloads":0.026595403213825208,"dependent_repos_count":0.2125798091367132,"dependent_packages_count":0.12674085255691875,"stargazers_count":3.6123894227330173,"forks_count":3.1112953428697727,"docker_downloads_count":0.406634544310693,"average":1.2493725624701566},"purl":"pkg:pypi/snowflake-connector-python","advisories":[{"uuid":"GSA_kwCzR0hTQS1xcWo2LTU0cTYtY3h2Ns4AB7qU","url":"https://github.com/advisories/GHSA-qqj6-54q6-cxv6","title":"Snowflake drivers writes sensitive information to logs","description":"Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the available log redaction did not cover all affected log paths and data types. An attacker with read access to the log destination, whether the local filesystem, a log aggregation service, or a CI/CD artifact store, could obtain credentials and decryption keys that, if still valid at the time of access, could be used to authenticate to the corresponding Snowflake account or cloud-storage object. Successful exploitation requires read access to the log destination, and impact is bounded by credential lifetime and object scope. The fix is available in Snowflake Connector for Python v4.7.3, Snowflake Go Driver v2.2.0, Snowflake JDBC Driver v4.3.4 (including the snowflake-jdbc-fips and snowflake-jdbc-thin), Snowflake Node.js Driver v3.3.0, Snowflake PHP PDO Driver v4.2.0, and Snowflake ODBC Driver v3.20.0. Users must manually upgrade and should securely delete previously generated diagnostic logs containing sensitive information where retention is not required.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-10-05T22:55:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":["https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6","https://nvd.nist.gov/vuln/detail/CVE-2026-86597","https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026#version-434-sep-03-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026#version-330-september-3-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026#version-3200-sep-3-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-420-sep-3-2026","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3","https://github.com/advisories/GHSA-qqj6-54q6-cxv6"],"source_kind":"github","identifiers":["GHSA-qqj6-54q6-cxv6","CVE-2026-86597"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-05T23:00:12.772Z","updated_at":"2026-11-02T16:01:12.164Z","epss_percentage":0.00089,"epss_percentile":0.00385,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcWo2LTU0cTYtY3h2Ns4AB7qU","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xcWo2LTU0cTYtY3h2Ns4AB7qU","packages":[{"ecosystem":"go","package_name":"github.com/snowflakedb/gosnowflake/v2","versions":[{"first_patched_version":"2.2.0","vulnerable_version_range":"\u003c 2.2.0"}],"purl":"pkg:go/github.com%2Fsnowflakedb%2Fgosnowflake%2Fv2"},{"ecosystem":"maven","package_name":"net.snowflake:snowflake-jdbc-fips","versions":[{"first_patched_version":"4.3.4","vulnerable_version_range":"\u003c 4.3.4"}],"purl":null},{"ecosystem":"maven","package_name":"net.snowflake:snowflake-jdbc-thin","versions":[{"first_patched_version":"4.3.4","vulnerable_version_range":"\u003c 4.3.4"}],"purl":null},{"ecosystem":"maven","package_name":"net.snowflake:snowflake-jdbc","versions":[{"first_patched_version":"4.3.4","vulnerable_version_range":"\u003c 4.3.4"}],"purl":null},{"ecosystem":"go","package_name":"github.com/snowflakedb/gosnowflake","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.19.1"}],"purl":"pkg:go/github.com%2Fsnowflakedb%2Fgosnowflake"},{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"4.7.3","vulnerable_version_range":"\u003c 4.7.3"}],"purl":"pkg:pypi/snowflake-connector-python"},{"ecosystem":"npm","package_name":"snowflake-sdk","versions":[{"first_patched_version":"3.3.0","vulnerable_version_range":"\u003c 3.3.0"}],"purl":"pkg:npm/snowflake-sdk"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcWo2LTU0cTYtY3h2Ns4AB7qU/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01Y2MyLTI4MmYtampxMs4ABbCa","url":"https://github.com/advisories/GHSA-5cc2-282f-jjq2","title":"Snowflake Connector for Python improperly verifies TLS hostnames","description":"Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this by intercepting or redirecting network traffic and presenting a certificate signed by any trusted CA for any domain, causing the connector to accept connections without validating that the certificate matched the requested hostname. Successful exploitation requires an on-path traffic interception capability (e.g. ARP/DNS poisoning, rogue access point, BGP hijacking, or malicious proxy/exit node). This vulnerability may have exposed credentials, query data, and staged file contents to interception and tampering, and may have enabled the attacker to issue arbitrary SQL within the context of the victim's connector session. Impact is limited by the privileges of the affected Snowflake role. The fix is available in Snowflake Connector for Python versions 4.7.1 and 3.18.1. Users must manually upgrade.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-07-16T09:32:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.2,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-15925","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.1","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.18.1","https://github.com/snowflakedb/snowflake-connector-python/commit/8969d6dc027092ee868965db022478b6c0fa40a1","https://github.com/advisories/GHSA-5cc2-282f-jjq2"],"source_kind":"github","identifiers":["GHSA-5cc2-282f-jjq2","CVE-2026-15925"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-08-31T23:00:07.812Z","updated_at":"2026-10-28T20:02:42.048Z","epss_percentage":0.00177,"epss_percentile":0.07199,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Y2MyLTI4MmYtampxMs4ABbCa","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01Y2MyLTI4MmYtampxMs4ABbCa","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"4.7.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.7.1"},{"first_patched_version":"3.18.1","vulnerable_version_range":"\u003c 3.18.1"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Y2MyLTI4MmYtampxMs4ABbCa/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0ydnBxLWZoNTItajN3ds4ABD7N","url":"https://github.com/advisories/GHSA-2vpq-fh52-j3wv","title":"snowflake-connector-python vulnerable to SQL Injection in write_pandas","description":"### Issue\nSnowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandas_tools module is vulnerable to SQL injection.\n\nThis vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1.\n\n### Vulnerability Details\nA function from the snowflake.connector.pandas_tools module is not sanitizing all of its arguments, and queries using them are not parametrized. An attacker controlling these arguments could achieve SQL injection by passing crafted input. Any SQL executed that way by an attacker would still run in the context of the current session.\n\n### Solution\nSnowflake released version 3.13.1 of the Snowflake Connector for Python, which fixes this issue. We recommend users upgrade to version 3.13.1.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-01-29T20:50:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.0,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-2vpq-fh52-j3wv","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.13.1","https://nvd.nist.gov/vuln/detail/CVE-2025-24793","https://github.com/snowflakedb/snowflake-connector-python/commit/f3f9b666518d29c31a49384bbaa9a65889e72056","https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2025-26.yaml","https://github.com/advisories/GHSA-2vpq-fh52-j3wv"],"source_kind":"github","identifiers":["GHSA-2vpq-fh52-j3wv","CVE-2025-24793"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":0.0,"created_at":"2025-01-29T21:08:53.067Z","updated_at":"2026-10-28T20:09:49.334Z","epss_percentage":0.00309,"epss_percentile":0.23542,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ydnBxLWZoNTItajN3ds4ABD7N","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0ydnBxLWZoNTItajN3ds4ABD7N","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"3.13.1","vulnerable_version_range":"\u003e= 2.2.5, \u003c= 3.13.0"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ydnBxLWZoNTItajN3ds4ABD7N/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tNGY2LXZjajQtdzVteM4ABD7M","url":"https://github.com/advisories/GHSA-m4f6-vcj4-w5mx","title":"snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache","description":"### Issue\nSnowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the serialization format, potentially leading to local privilege escalation.\n\nThis vulnerability affects versions 2.7.12 through 3.13.0. Snowflake fixed the issue in version 3.13.1.\n\n### Vulnerability Details\nThe OCSP response cache is saved locally on the machine running the Connector using the pickle serialization format. This can potentially lead to local privilege escalation if an attacker has write access to the OCSP response cache file.\n\n### Solution\nSnowflake released version 3.13.1 of the Snowflake Connector for Python, which fixes this issue. We recommend users upgrade to version 3.13.1.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-01-29T20:50:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.7,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-m4f6-vcj4-w5mx","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.13.1","https://nvd.nist.gov/vuln/detail/CVE-2025-24794","https://github.com/snowflakedb/snowflake-connector-python/commit/3769b43822357c3874c40f5e74068458c2dc79af","https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2025-27.yaml","https://github.com/advisories/GHSA-m4f6-vcj4-w5mx"],"source_kind":"github","identifiers":["GHSA-m4f6-vcj4-w5mx","CVE-2025-24794"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":0.0,"created_at":"2025-01-29T21:08:53.510Z","updated_at":"2026-11-02T16:09:55.322Z","epss_percentage":0.00251,"epss_percentile":0.165,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNGY2LXZjajQtdzVteM4ABD7M","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tNGY2LXZjajQtdzVteM4ABD7M","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"3.13.1","vulnerable_version_range":"\u003e= 2.7.12, \u003c= 3.13.0"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNGY2LXZjajQtdzVteM4ABD7M/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yMng2LWNqZzctOHI0M84ABD7L","url":"https://github.com/advisories/GHSA-r2x6-cjg7-8r43","title":"snowflake-connector-python vulnerable to insecure cache files permissions","description":"### Issue\nSnowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. On Linux systems, when temporary credential caching is enabled, the Snowflake Connector for Python will cache temporary credentials locally in a world-readable file.\n\nThis vulnerability affects versions 2.3.7 through 3.13.0. Snowflake fixed the issue in version 3.13.1.\n\n### Vulnerability Details\nOn Linux, when either EXTERNALBROWSER or USERNAME_PASSWORD_MFA authentication methods are used with temporary credential caching enabled, the Snowflake Connector for Python will cache the temporary credentials in a local file. In the vulnerable versions of the Driver, this file is created with world-readable permissions.\n\n### Solution\nSnowflake released version 3.13.1 of the Snowflake Connector for Python, which fixes this issue. We recommend users upgrade to version 3.13.1.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-01-29T20:49:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.4,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":["https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-r2x6-cjg7-8r43","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.13.1","https://nvd.nist.gov/vuln/detail/CVE-2025-24795","https://github.com/snowflakedb/snowflake-connector-python/commit/3769b43822357c3874c40f5e74068458c2dc79af","https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2025-28.yaml","https://github.com/advisories/GHSA-r2x6-cjg7-8r43"],"source_kind":"github","identifiers":["GHSA-r2x6-cjg7-8r43","CVE-2025-24795"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":0.0,"created_at":"2025-01-29T21:08:53.533Z","updated_at":"2026-10-28T20:09:49.335Z","epss_percentage":0.0014,"epss_percentile":0.02724,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yMng2LWNqZzctOHI0M84ABD7L","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yMng2LWNqZzctOHI0M84ABD7L","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"3.13.1","vulnerable_version_range":"\u003e= 2.3.7, \u003c= 3.13.0"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yMng2LWNqZzctOHI0M84ABD7L/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01dnZnLXB2aHAtaHYybc4ABApF","url":"https://github.com/advisories/GHSA-5vvg-pvhp-hv2m","title":"The Snowflake Connector for Python stores sensitive data in logs","description":"### Issue\nSnowflake recently learned about and remediated a set of vulnerabilities in the Snowflake Connector for Python. Under specific conditions, certain users credentials (or portions of those credentials) were logged locally by the Connector to the users own systems. The credentials were not logged by Snowflake.\n\nThese vulnerabilities affect versions up to and including 3.12.2. Snowflake fixed the issue in version 3.12.3.\n\n### Vulnerability Details\nWhen the logging level was set by the user to DEBUG, the Connector could have logged Duo passcodes (when specified via the “passcode” parameter) and Azure SAS tokens. Additionally, the [SecretDetector](https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-example#logging) logging formatter, if enabled, contained bugs which caused it to not fully redact JWT tokens and certain private key formats.\n\n### Solution\nSnowflake released version 3.12.3 of the Snowflake Connector for Python, which fixes these issues. We recommend users upgrade to version 3.12.3 and review their logs for any potentially sensitive information that may have been captured.\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-10-24T22:42:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-5vvg-pvhp-hv2m","https://github.com/snowflakedb/snowflake-connector-python/commit/dbc9284a3c0382c131b971b35e8d6ab93c46f37a","https://nvd.nist.gov/vuln/detail/CVE-2024-49750","https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2024-191.yaml","https://github.com/advisories/GHSA-5vvg-pvhp-hv2m"],"source_kind":"github","identifiers":["GHSA-5vvg-pvhp-hv2m","CVE-2024-49750"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":0.0,"created_at":"2024-10-24T23:06:11.987Z","updated_at":"2026-10-28T20:10:18.557Z","epss_percentage":0.00202,"epss_percentile":0.09513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dnZnLXB2aHAtaHYybc4ABApF","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01dnZnLXB2aHAtaHYybc4ABApF","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"3.12.3","vulnerable_version_range":"\u003c 3.12.3"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dnZnLXB2aHAtaHYybc4ABApF/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01dzVtLXBmdzktYzhmcM4AAzxe","url":"https://github.com/advisories/GHSA-5w5m-pfw9-c8fp","title":"Snowflake Python Connector vulnerable to Command Injection","description":"### Issue\nSnowflake was informed via our bug bounty program of a command injection vulnerability in the Snowflake Python connector via SSO browser URL authentication. \n\n### Impacted driver package: \nsnowflake-connector-python\n\n### Impacted version range: \nbefore [Version 3.0.2](https://community.snowflake.com/s/article/Snowflake-Connector-for-Python-Release-Notes)\n\n### Attack Scenario\nIn order to exploit the potential for command injection, an attacker would need to be successful in (1) establishing a malicious resource and (2) redirecting users to utilize the resource. The attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user’s local machine would render the malicious payload, leading to a remote code execution. \n\nThis attack scenario can be mitigated through URL whitelisting as well as common anti-phishing resources.   \n\n### Solution\nOn March 23rd, 2023, Snowflake merged a patch that fixed a command injection vulnerability in the Snowflake Python connector via SSO browser URL authentication. The vulnerability affected the Snowflake Python connector before Version 3.0.2. We strongly recommend users upgrade to Version 3.0.2 as soon as possible via the following resources: [Snowflake Python Connector](https://docs.snowflake.com/en/developer-guide/python-connector/python-connector)\n\n### Additional Information\nIf you discover a security vulnerability in one of our products or websites, please report the issue to HackerOne. For more information, please see our [Vulnerability Disclosure Policy](https://hackerone.com/snowflake?type=team).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-06-09T22:53:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.5,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-5w5m-pfw9-c8fp","https://nvd.nist.gov/vuln/detail/CVE-2023-34233","https://github.com/snowflakedb/snowflake-connector-python/pull/1480","https://github.com/snowflakedb/snowflake-connector-python/commit/1cdbd3b1403c5ef520d7f4d9614fe35165e101ac","https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2023-88.yaml","https://github.com/advisories/GHSA-5w5m-pfw9-c8fp"],"source_kind":"github","identifiers":["GHSA-5w5m-pfw9-c8fp","CVE-2023-34233"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":28.748676288208358,"created_at":"2023-06-09T23:03:22.749Z","updated_at":"2026-11-02T16:16:12.898Z","epss_percentage":0.01841,"epss_percentile":0.78574,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dzVtLXBmdzktYzhmcM4AAzxe","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01dzVtLXBmdzktYzhmcM4AAzxe","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"3.0.2","vulnerable_version_range":"\u003c 3.0.2"}],"purl":"pkg:pypi/snowflake-connector-python"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01dzVtLXBmdzktYzhmcM4AAzxe/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00cjZqLWZ3Y3gtOTRjZs4AAvz3","url":"https://github.com/advisories/GHSA-4r6j-fwcx-94cf","title":"snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)","description":"An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the get_file_transfer_type method.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-11-10T12:01:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-42965","https://research.jfrog.com/vulnerabilities/snowflake-connector-python-redos-xray-257185/","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v2.8.2","https://github.com/snowflakedb/snowflake-connector-python/pull/1327","https://github.com/snowflakedb/snowflake-connector-python/commit/b9d2fc789fae4db865dde3d2a1bd72c8a9eab091","https://github.com/advisories/GHSA-4r6j-fwcx-94cf"],"source_kind":"github","identifiers":["GHSA-4r6j-fwcx-94cf","CVE-2022-42965"],"repository_url":"https://github.com/snowflakedb/snowflake-connector-python","blast_radius":0.0,"created_at":"2022-12-21T16:11:51.708Z","updated_at":"2026-11-02T16:15:25.088Z","epss_percentage":0.0088,"epss_percentile":0.58635,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cjZqLWZ3Y3gtOTRjZs4AAvz3","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00cjZqLWZ3Y3gtOTRjZs4AAvz3","packages":[{"ecosystem":"pypi","package_name":"snowflake-connector-python","versions":[{"first_patched_version":"2.8.2","vulnerable_version_range":"\u003c 2.8.2"}],"purl":"pkg:pypi/snowflake-connector-python","statistics":{"dependent_packages_count":185,"dependent_repos_count":2411,"downloads":99504889,"downloads_period":"last-month"},"affected_versions":["1.3.17","1.3.18","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7","1.4.8","1.4.9","1.4.10","1.4.11","1.4.12","1.4.13","1.4.14","1.4.15","1.4.16","1.4.17","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6","1.5.7","1.5.8","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.6.5","1.6.6","1.6.7","1.6.8","1.6.9","1.6.10","1.6.11","1.6.12","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.7.10","1.7.11","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.8.6","1.8.7","1.9.1","2.0.0","2.0.1","2.0.2","2.0.3","2.0.4","2.1.0","2.1.1","2.1.2","2.1.3","2.2.0","2.2.1","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.2.7","2.2.8","2.2.9","2.2.10","2.3.0","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9","2.3.10","2.4.0","2.4.1","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.5.0","2.5.1","2.6.0","2.6.1","2.6.2","2.7.0","2.7.1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.7.10","2.7.11","2.7.12","2.8.0","2.8.1"],"unaffected_versions":["2.8.2","2.8.3","2.9.0","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.1.0","3.1.0a1","3.1.0a2","3.1.1","3.2.0","3.2.1","3.3.0","3.3.0b1","3.3.1","3.4.0","3.4.1","3.5.0","3.6.0","3.7.0","3.7.1","3.8.0","3.8.1","3.9.0","3.9.1","3.10.0","3.10.1","3.11.0","3.12.0","3.12.1","3.12.2","3.12.3","3.12.4","3.13.0","3.13.1","3.13.2","3.14.0","3.14.1","3.15.0","3.16.0","3.17.0","3.17.1","3.17.2","3.17.3","3.17.4","3.18.0","3.18.1","4.0.0","4.1.0","4.1.1","4.2.0","4.3.0","4.4.0","4.5.0","4.6.0","4.7.0","4.7.1","4.7.2","4.7.3","4.7.4","4.7.5","4.8.0","4.8.1","5.0.0","5.0.0b1","5.0.0b2","5.0.0b3","5.0.0b4","5.0.0b5","5.0.0b6","5.0.0rc1","5.0.0rc2","5.0.0rc3","5.0.0rc4","5.0.0rc5","5.1.0"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cjZqLWZ3Y3gtOTRjZs4AAvz3/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/snowflake-connector-python","docker_dependents_count":172,"docker_downloads_count":73867221,"usage_url":"https://repos.ecosyste.ms/usage/pypi/snowflake-connector-python","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/snowflake-connector-python/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-24T22:16:43.578Z","issues_count":10,"pull_requests_count":1360,"avg_time_to_close_issue":2546780.5,"avg_time_to_close_pull_request":578352.608277901,"issues_closed_count":2,"pull_requests_closed_count":1353,"pull_request_authors_count":30,"issue_authors_count":10,"avg_comments_per_issue":1.5,"avg_comments_per_pull_request":0.8139705882352941,"merged_pull_requests_count":885,"bot_issues_count":0,"bot_pull_requests_count":114,"past_year_issues_count":10,"past_year_pull_requests_count":1237,"past_year_avg_time_to_close_issue":2546780.5,"past_year_avg_time_to_close_pull_request":576030.1796747968,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":1230,"past_year_pull_request_authors_count":29,"past_year_issue_authors_count":10,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":0.8132578819725141,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":114,"past_year_merged_pull_requests_count":781,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/snowflakedb%2Fdrivers/issues","maintainers":[{"login":"sfc-gh-tarczewski","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sfc-gh-tarczewski"},{"login":"sfc-gh-dszmolka","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sfc-gh-dszmolka"}],"active_maintainers":[{"login":"sfc-gh-tarczewski","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sfc-gh-tarczewski"},{"login":"sfc-gh-dszmolka","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sfc-gh-dszmolka"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/snowflake-connector-python/codemeta","maintainers":[{"uuid":"hyu","login":"hyu","name":null,"email":null,"url":null,"packages_count":3,"html_url":"https://pypi.org/user/hyu/","role":null,"created_at":"2022-12-15T04:38:08.361Z","updated_at":"2022-12-15T04:38:08.361Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/hyu/packages"},{"uuid":"kirandama","login":"kirandama","name":null,"email":null,"url":null,"packages_count":6,"html_url":"https://pypi.org/user/kirandama/","role":null,"created_at":"2022-12-15T04:38:08.366Z","updated_at":"2022-12-15T04:38:08.366Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/kirandama/packages"},{"uuid":"ankit.bhatnagar","login":"ankit.bhatnagar","name":null,"email":null,"url":null,"packages_count":4,"html_url":"https://pypi.org/user/ankit.bhatnagar/","role":null,"created_at":"2022-12-15T04:38:08.352Z","updated_at":"2022-12-15T04:38:08.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ankit.bhatnagar/packages"},{"uuid":"azhan","login":"azhan","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/azhan/","role":null,"created_at":"2022-12-15T04:38:08.377Z","updated_at":"2022-12-15T04:38:08.377Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/azhan/packages"},{"uuid":"harshc","login":"harshc","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/harshc/","role":null,"created_at":"2022-12-15T04:38:08.383Z","updated_at":"2022-12-15T04:38:08.383Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/harshc/packages"},{"uuid":"notkriswagner","login":"notkriswagner","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/notkriswagner/","role":null,"created_at":"2022-12-15T04:38:08.389Z","updated_at":"2022-12-15T04:38:08.389Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/notkriswagner/packages"},{"uuid":"Tianyi","login":"Tianyi","name":null,"email":null,"url":null,"packages_count":2,"html_url":"https://pypi.org/user/Tianyi/","role":null,"created_at":"2022-12-15T04:38:08.395Z","updated_at":"2022-12-15T04:38:08.395Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/Tianyi/packages"},{"uuid":"angel.avalos","login":"angel.avalos","name":null,"email":null,"url":null,"packages_count":5,"html_url":"https://pypi.org/user/angel.avalos/","role":"Maintainer","created_at":"2023-05-07T04:54:32.923Z","updated_at":"2023-05-07T04:54:32.923Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/angel.avalos/packages"},{"uuid":"enkwate","login":"enkwate","name":null,"email":null,"url":null,"packages_count":4,"html_url":"https://pypi.org/user/enkwate/","role":"Maintainer","created_at":"2023-05-07T04:54:32.972Z","updated_at":"2023-05-07T04:54:32.972Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/enkwate/packages"},{"uuid":"snowflakerelease","login":"snowflakerelease","name":null,"email":null,"url":null,"packages_count":19,"html_url":"https://pypi.org/user/snowflakerelease/","role":"Maintainer","created_at":"2023-12-13T14:11:21.172Z","updated_at":"2023-12-13T14:11:21.172Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/snowflakerelease/packages"},{"uuid":"pmikoz_sf","login":"pmikoz_sf","name":null,"email":null,"url":null,"packages_count":1,"html_url":"https://pypi.org/user/pmikoz_sf/","role":"Owner","created_at":"2026-08-18T09:01:12.216Z","updated_at":"2026-08-18T09:01:12.216Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/pmikoz_sf/packages"}]}