CVE-2026-86597
MediumAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 198
- of 18,026 indexed, latest versions
- Container images
- 102
- deployed by those charts
- Fix available
- 4 of 5
- affected packages
Snowflake drivers writes sensitive information to logs
Carried by container images the latest versions of 198 of 18,026 indexed charts deploy, on 102 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.3.4, v1.5.0, v1.6.1, v1.6.2+23 more | no fix listed | 65 |
| snowflake-sdknpm | 1.6.1, 1.6.2, 1.6.6, 1.6.17+7 more | 3.3.0 | 18 |
| snowflake-connector-pythonpypi | 2.1.3, 3.6.0, 3.7.1, 3.12.2+4 more | 4.7.3 | 10 |
| github.com/ | v2.0.2, v2.1.0 | 2.2.0 | 6 |
| snowflake-jdbcmaven | 3.11.1, 3.13.22, 3.13.30 | 4.3.4 | 4 |
- OSV records
- GHSA-qqj6-54q6-cxv6
Charts affected
198 by stars
Container images carrying it
102 by charts deploying them
A fixed version is listed for 4 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hashicorp/ | dfc3500beb0e | github.com/ | no fix listed | 1 |
| hashicorp/ | ff9b17b0cefe | github.com/ | no fix listed | 1 |
| holoinsight/ | 42ba8dc3113c | github.com/ | no fix listed | 1 |
| infisical/ | 3365445909be | snowflake-sdk | 3.3.0 | 1 |
| infisical/ | 6b911e3938ac | snowflake-sdk | 3.3.0 | 1 |
| library/ | ba10ac9ba17a | github.com/ | no fix listed | 1 |
| library/ | 7232f6388a4d | github.com/ | no fix listed | 1 |
| library/ | 28e98eece020 | github.com/ | no fix listed | 1 |
| library/ | 507a3eecf809 | github.com/ | no fix listed | 1 |
| library/ | 794079a7f241 | github.com/ | no fix listed | 1 |
| library/ | addb86c0c520 | github.com/ | no fix listed | 1 |
| library/ | f98ac9dd97b0 | github.com/ | no fix listed | 1 |
| mindsdb/ | 163011c09299 | snowflake-connector-python | 4.7.3 | 1 |
| n8nio/ | 761374d4eb84 | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | 8b39ed5a2de9 | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | a9195bc499a3 | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | cfe2704ff858 | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | dd171d45102a | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | e8302e8bd402 | snowflake-sdk | 3.3.0 | 1 |
| n8nio/ | ed16e560c40e | snowflake-sdk | 3.3.0 | 1 |
| nocodb/ | 4ccfc5114506 | snowflake-sdk | 3.3.0 | 1 |
| nocodb/ | d9516f0bf546 | snowflake-sdk | 3.3.0 | 1 |
| otel/ | 125bdbeb7590 | github.com/ | 2.2.0 | 1 |
| otel/ | 1ab0baba0ee3 | github.com/ | no fix listed | 1 |
| otel/ | 37fa87091cfa | github.com/ | no fix listed | 1 |
| otel/ | 3bc07732530c | github.com/ | no fix listed | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | no fix listed | 1 |
| otel/ | 71fcef33ae71 | github.com/ | no fix listed | 1 |
| otel/ | 923eb1cfae32 | github.com/ | no fix listed | 1 |
| otel/ | 995f17004231 | github.com/ | no fix listed | 1 |
| otel/ | b3079f45e19b | github.com/ | 2.2.0 | 1 |
| otel/ | c6671841470b | github.com/ | no fix listed | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ | no fix listed | 1 |
| otel/ | f2f01157055a | github.com/ | 2.2.0 | 1 |
| otel/ | faf125d656fa | github.com/ | no fix listed | 1 |
| redash/ | 00d813437db5 | snowflake-connector-python | 4.7.3 | 1 |
| redash/ | 9392753c0376 | snowflake-connector-python | 4.7.3 | 1 |
| redash/ | c5c9148f5c38 | snowflake-connector-python | 4.7.3 | 1 |
| signoz/ | deb566a7a3c0 | github.com/ | no fix listed | 1 |
| sqlpad/ | d3d2f430dffd | snowflake-sdk | 3.3.0 | 1 |
| streamnative/ | 31533fa9fab7 | github.com/ | no fix listed | 1 |
| tooljet/ | c85a4720e42e | snowflake-sdk | 3.3.0 | 1 |
| ghcr.io/ | c4b1d3d0f052 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 07011b628e6b | github.com/ | 2.2.0 | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2d16b28a72f3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 3962e187d099 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9f157fe035f1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 21715979aefa | github.com/ | no fix listed | 1 |
| public.ecr.aws/ | f4925b15ce94 | snowflake-connector-python | 4.7.3 | 1 |