PyPI/snowflake-connector-python CVE-2023-34233: high 7.3, EPSS 1.84%

Snowflake Python Connector vulnerable to Command Injection

Action: Upgrade snowflake-connector-python to 3.0.2 or later.

pip install snowflake-connector-python==3.0.2

Affected

Fixed versions

Sources

• osv: GHSA-5w5m-pfw9-c8fp
• https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-5w5m-pfw9-c8fp
• https://nvd.nist.gov/vuln/detail/CVE-2023-34233
• https://github.com/snowflakedb/snowflake-connector-python/pull/1480
• https://github.com/snowflakedb/snowflake-connector-python/commit/1cdbd3b1403c5ef520d7f4d9614fe35165e101ac
• https://github.com/pypa/advisory-database/tree/main/vulns/snowflake-connector-python/PYSEC-2023-88.yaml
• https://github.com/snowflakedb/snowflake-connector-python

CVE-2023-34233 · published 2023-06-09T22:53:14Z · modified 2024-10-28T14:44:50.666768Z · JSON