StackRadarChart IndexLive demo

CVE-2022-42965

Medium

Advisory

Published 10 Nov 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,781 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 1 of 1; affected package

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
snowflake-connector-pythonpypi	2.1.3	2.8.2	2

OSV records: GHSA-4r6j-fwcx-94cf
Also known as: PYSEC-2026-922

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

supersetcloudposse

1 of 1 See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-42965.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	snowflake-connector-python@2.1.3	2.8.2

Open the chart page →

5,851

fadicetic

1 of 25 See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2022-42965.

Container image	Digest	Package	Fixed in
amancevice/superset :0.35.2	12a0a9e66550	snowflake-connector-python@2.1.3	2.8.2

Open the chart page →

52,919

redashinseefrlab

1 of 3 See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2022-42965.

Container image	Digest	Package	Fixed in
redash/redash :10.0.0.b50363	9392753c0376	snowflake-connector-python@2.1.3	2.8.2

Open the chart page →

3,314

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
amancevice/superset :0.35.2	12a0a9e66550	snowflake-connector-python@2.1.3	2.8.2	2
redash/redash :10.0.0.b50363	9392753c0376	snowflake-connector-python@2.1.3	2.8.2	1