{"action":"Upgrade snowflake-connector-python to 3.18.1 or later.","affected":[{"fixed":"3.18.1","introduced":"0"},{"fixed":"4.7.1","introduced":"4.0.0"}],"component":"snowflake-connector-python","cve_ids":["CVE-2026-15925"],"ecosystem":"PyPI","epss":0.00177,"exploited":false,"fixed_versions":["3.18.1","4.7.1"],"ghsa_id":"GHSA-5cc2-282f-jjq2","id":"tcs_01M5KH8KSFTXRZZ8BMJNWPPBTS","modified_at":"2026-09-10T12:15:12.770494143Z","published_at":"2026-09-10T09:44:50.685332Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3920","https://nvd.nist.gov/vuln/detail/CVE-2026-15925","https://github.com/snowflakedb/snowflake-connector-python/commit/8969d6dc027092ee868965db022478b6c0fa40a1","https://github.com/snowflakedb/snowflake-connector-python","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v3.18.1","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.1","https://pypi.org/project/snowflake-connector-python","https://github.com/advisories/GHSA-5cc2-282f-jjq2"],"severity":{"label":"critical","score":9.2},"sources":[{"source":"osv","source_id":"PYSEC-2026-3920","url":"https://osv.dev/vulnerability/PYSEC-2026-3920"},{"source":"nvd","source_id":"CVE-2026-15925","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15925"}],"summary":"Snowflake Connector for Python improperly verifies TLS hostnames"}