PyPI/snowflake-connector-python CVE-2025-24793: high 7, EPSS 0.31%

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Action: Upgrade snowflake-connector-python to 3.13.1 or later.

pip install snowflake-connector-python==3.13.1

Affected

Fixed versions

Sources

• osv: GHSA-2vpq-fh52-j3wv
• https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-2vpq-fh52-j3wv
• https://nvd.nist.gov/vuln/detail/CVE-2025-24793
• https://github.com/snowflakedb/snowflake-connector-python/commit/f3f9b666518d29c31a49384bbaa9a65889e72056
• https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2025-26.yaml
• https://github.com/snowflakedb/snowflake-connector-python
• https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.13.1

CVE-2025-24793 · published 2025-01-29T20:50:33Z · modified 2026-09-10T03:50:21.789969057Z · JSON