CVE-2026-15736
2 advisories.
PyPI/snowflake-sqlalchemy CVE-2026-15736: high 8.3
Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
Action: Upgrade snowflake-sqlalchemy to 1.11.0 or later.
pip install snowflake-sqlalchemy==1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.6 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GHSA-8g6f-qw9x-4q6q
- https://nvd.nist.gov/vuln/detail/CVE-2026-15736
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/707
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/708
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/710
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/2c33792c91449e746a2c7ef24c25f0ede0a4a875
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/35edf4dc5e76b9a9fdfa74c8e4f6fd14642110f1
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/a198ed2197bb3e0be57268032ed6e8b7fdeb8129
- https://github.com/snowflakedb/snowflake-sqlalchemy
- https://github.com/snowflakedb/snowflake-sqlalchemy/releases
- https://github.com/snowflakedb/snowflake-sqlalchemy/releases/tag/v1.11.0
CVE-2026-15736 · published · modified · JSON
PyPI/snowflake-sqlalchemy CVE-2026-15736: high 8.3
Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
Action: Upgrade snowflake-sqlalchemy to 1.11.0 or later.
pip install snowflake-sqlalchemy==1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.6 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: PYSEC-2026-3921
- https://nvd.nist.gov/vuln/detail/CVE-2026-15736
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/707
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/708
- https://github.com/snowflakedb/snowflake-sqlalchemy/pull/710
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/2c33792c91449e746a2c7ef24c25f0ede0a4a875
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/35edf4dc5e76b9a9fdfa74c8e4f6fd14642110f1
- https://github.com/snowflakedb/snowflake-sqlalchemy/commit/a198ed2197bb3e0be57268032ed6e8b7fdeb8129
- https://github.com/snowflakedb/snowflake-sqlalchemy
- https://github.com/snowflakedb/snowflake-sqlalchemy/releases
- https://github.com/snowflakedb/snowflake-sqlalchemy/releases/tag/v1.11.0
- https://pypi.org/project/snowflake-sqlalchemy
- https://github.com/advisories/GHSA-8g6f-qw9x-4q6q
CVE-2026-15736 · published · modified · JSON