StackRadar

CVE-2026-86597

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
198
of 18,026 indexed, latest versions
Container images
102
deployed by those charts
Fix available
4 of 5
affected packages

Snowflake drivers writes sensitive information to logs

Carried by container images the latest versions of 198 of 18,026 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
github.com/snowflakedb/gosnowflakegolangv1.3.4, v1.5.0, v1.6.1, v1.6.2+23 moreno fix listed65
snowflake-sdknpm1.6.1, 1.6.2, 1.6.6, 1.6.17+7 more3.3.018
snowflake-connector-pythonpypi2.1.3, 3.6.0, 3.7.1, 3.12.2+4 more4.7.310
github.com/snowflakedb/gosnowflake/v2golangv2.0.2, v2.1.02.2.06
snowflake-jdbcmaven3.11.1, 3.13.22, 3.13.304.3.44
OSV records
GHSA-qqj6-54q6-cxv6

Charts affected

198 by stars
ChartLatestAffected imagesRadar Score
pages-microservicebusi-adsVerified publisher1.0.01 of 3See more

pages-microservice busi-ads 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
catalyst-agentscatalyst-agents0.1.351 of 18See more

catalyst-agents catalyst-agents 0.1.35

1 of the 18 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/snowflakedb/gosnowflake/v2@v2.1.0
2.2.0

Open the chart page →

22,001
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed

Open the chart page →

26,608
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.0491b0578c049
github.com/snowflakedb/gosnowflake@v1.19.1
no fix listed

Open the chart page →

7,048
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/snowflakedb/gosnowflake@v1.6.1
no fix listed

Open the chart page →

7,943
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/snowflakedb/gosnowflake@v1.6.1
no fix listed

Open the chart page →

7,943
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

28,191
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
snowflake-connector-python@3.12.3
4.7.3

Open the chart page →

5,767
sqlbackupdatarepo0.0.31 of 1See more

sqlbackup datarepo 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
broadinstitute/dsde-toolbox:master656131886a08
github.com/snowflakedb/gosnowflake@v1.6.3
no fix listed

Open the chart page →

6,388
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
decisionrules-aksdecisionrules-aksVerified publisher0.3.01 of 2See more

decisionrules-aks decisionrules-aks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
github.com/snowflakedb/gosnowflake@v1.19.1
snowflake-sdk@2.4.3
no fix listed
3.3.0

Open the chart page →

458
decisionrules-eksdecisionrules-eksVerified publisher0.4.01 of 2See more

decisionrules-eks decisionrules-eks 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
github.com/snowflakedb/gosnowflake@v1.19.1
snowflake-sdk@2.4.3
no fix listed
3.3.0

Open the chart page →

458
decisionrules-ingressdecisionrules-ingressVerified publisher0.3.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
github.com/snowflakedb/gosnowflake@v1.19.1
snowflake-sdk@2.4.3
no fix listed
3.3.0

Open the chart page →

458
decisionrules-ocpdecisionrules-ocpVerified publisher0.2.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
decisionrules/server:latestbb3a93224b5a
github.com/snowflakedb/gosnowflake@v1.19.1
snowflake-sdk@2.4.3
no fix listed
3.3.0

Open the chart page →

1,506
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
dnation-kubernetes-monitoring-stackdnationcloud5.0.01 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.0

1 of the 18 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
github.com/snowflakedb/gosnowflake@v1.19.1
no fix listed

Open the chart page →

27,684
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/snowflakedb/gosnowflake@v1.6.22
no fix listed

Open the chart page →

28,995
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
snowflake-jdbc@3.13.22
4.3.4

Open the chart page →

74,057
datadog-apmfairwinds-incubator2.0.11 of 1See more

datadog-apm fairwinds-incubator 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
snowflake-connector-python@3.17.2
4.7.3

Open the chart page →

3,542
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/snowflakedb/gosnowflake@v1.14.1
no fix listed
grafana/alloy:v1.12.2f94b1c82957a
github.com/snowflakedb/gosnowflake@v1.14.1
no fix listed

Open the chart page →

17,047
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
snowflake-connector-python@4.5.0
4.7.3

Open the chart page →

4,190
flyte-devboxflyte0.1.01 of 14See more

flyte-devbox flyte 0.1.0

1 of the 14 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
snowflake-connector-python@4.5.0
4.7.3

Open the chart page →

10,970
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/snowflakedb/gosnowflake@v1.11.0
no fix listed

Open the chart page →

15,333
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/snowflakedb/gosnowflake@v1.12.0
no fix listed

Open the chart page →

56,631
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/snowflakedb/gosnowflake@v1.14.1
no fix listed

Open the chart page →

4,265
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/snowflakedb/gosnowflake@v1.16.0
no fix listed

Open the chart page →

10,552
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
snowflake-jdbc@3.13.30
4.3.4

Open the chart page →

117,295
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/snowflakedb/gosnowflake@v1.12.0
no fix listed

Open the chart page →

1,956
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
infisical/infisical:latest3365445909be
snowflake-sdk@2.3.6
3.3.0

Open the chart page →

3,361
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
nocodb/nocodb:latest4ccfc5114506
snowflake-sdk@2.4.3
3.3.0

Open the chart page →

873
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
snowflake-connector-python@2.1.3
4.7.3

Open the chart page →

4,452
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/snowflakedb/gosnowflake@v1.6.3
no fix listed

Open the chart page →

5,800
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/snowflakedb/gosnowflake@v1.6.3
no fix listed

Open the chart page →

5,800
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
snowflake-sdk@1.12.0
3.3.0

Open the chart page →

7,063
sql-exporterjdstoneVerified publisher0.2.11 of 1See more

sql-exporter jdstone 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:0.16.0b8e4757c7def
github.com/snowflakedb/gosnowflake@v1.11.2
no fix listed

Open the chart page →

1,247
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed

Open the chart page →

5,068
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/snowflakedb/gosnowflake@v1.6.13
no fix listed

Open the chart page →

24,151
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
snowflake-connector-python@4.4.0
4.7.3

Open the chart page →

11,283
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
snowflake-sdk@1.6.1
3.3.0

Open the chart page →

3,611

Container images carrying it

102 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.