Approved changes feed: RSS · Atom

cpe:2.3:a:snowflake:snowflake-connector-python:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSnowflake (de799455-6744-506b-babc-9114bb379007)
ProductSnowflake Connector Python (045e136d-aa28-59dd-98fa-5b13e3fd338f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42965 vulnerable 2026-06-08 05:49:31.001815 Exponential ReDoS in snowflake-connector-python leads to denial of service
LOW (3.7)
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method
Published: 2022-11-09T00:00:00.000Z
Updated: 2025-05-01T19:19:10.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.