{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/snowflakedb/gosnowflake","cve_ids":["CVE-2026-86597"],"ecosystem":"Go","epss":0.00089,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qqj6-54q6-cxv6","id":"tcs_01M5KGVYSCHRDA4CXG8KZFVQKY","modified_at":"2026-10-15T14:55:36.220385453Z","published_at":"2026-10-07T14:10:51Z","references":["https://osv.dev/vulnerability/GO-2026-6665","https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6","https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a","https://github.com/snowflakedb/gosnowflake/pull/1844","https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6665","url":"https://osv.dev/vulnerability/GO-2026-6665"}],"summary":"Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake"}