{"action":"Upgrade snowflake-connector-python to 4.7.3 or later.","affected":[{"fixed":"4.7.3","introduced":"0"}],"component":"snowflake-connector-python","cve_ids":["CVE-2026-86597"],"ecosystem":"PyPI","epss":0.00089,"exploited":false,"fixed_versions":["4.7.3"],"ghsa_id":"GHSA-qqj6-54q6-cxv6","id":"tcs_01M5KHB6SQ4E09T8MC8Z8PWHBT","modified_at":"2026-10-15T14:55:36.220385453Z","published_at":"2026-10-15T10:22:44.618980Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4301","https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6","https://nvd.nist.gov/vuln/detail/CVE-2026-86597","https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026#version-434-sep-03-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026#version-330-september-3-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026#version-3200-sep-3-2026","https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-420-sep-3-2026","https://github.com/snowflakedb/snowflake-connector-nodejs","https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3","https://pypi.org/project/snowflake-connector-python","https://github.com/advisories/GHSA-qqj6-54q6-cxv6"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-4301","url":"https://osv.dev/vulnerability/PYSEC-2026-4301"}],"summary":"Snowflake drivers writes sensitive information to logs"}