CVE-2026-15925
2 advisories.
PyPI/snowflake-connector-python CVE-2026-15925: critical, EPSS 0.29%
Snowflake Connector for Python improperly verifies TLS hostnames
Action: Upgrade snowflake-connector-python to 3.18.1 or later.
pip install snowflake-connector-python==3.18.1pip install snowflake-connector-python==4.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18.1 | - |
| 4.0.0 | 4.7.1 | - |
Fixed versions
| 3.18.1 | 4.7.1 |
Sources
- osv: GHSA-5cc2-282f-jjq2
- https://nvd.nist.gov/vuln/detail/CVE-2026-15925
- https://github.com/snowflakedb/snowflake-connector-python/commit/8969d6dc027092ee868965db022478b6c0fa40a1
- https://github.com/snowflakedb/snowflake-connector-python
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.18.1
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.1
CVE-2026-15925 · published · modified · JSON
PyPI/snowflake-connector-python CVE-2026-15925: unknown, EPSS 0.29%
Snowflake Connector for Python improperly verifies TLS hostnames
Action: Upgrade snowflake-connector-python to 3.18.1 or later.
pip install snowflake-connector-python==3.18.1pip install snowflake-connector-python==4.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18.1 | - |
| 4.0.0 | 4.7.1 | - |
Fixed versions
| 3.18.1 | 4.7.1 |
Sources
- osv: PYSEC-2026-3920
- https://nvd.nist.gov/vuln/detail/CVE-2026-15925
- https://github.com/snowflakedb/snowflake-connector-python/commit/8969d6dc027092ee868965db022478b6c0fa40a1
- https://github.com/snowflakedb/snowflake-connector-python
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.18.1
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.1
- https://pypi.org/project/snowflake-connector-python
- https://github.com/advisories/GHSA-5cc2-282f-jjq2
CVE-2026-15925 · published · modified · JSON