StackRadar

CVE-2026-86597

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
198
of 18,026 indexed, latest versions
Container images
102
deployed by those charts
Fix available
4 of 5
affected packages

Snowflake drivers writes sensitive information to logs

Carried by container images the latest versions of 198 of 18,026 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
github.com/snowflakedb/gosnowflakegolangv1.3.4, v1.5.0, v1.6.1, v1.6.2+23 moreno fix listed65
snowflake-sdknpm1.6.1, 1.6.2, 1.6.6, 1.6.17+7 more3.3.018
snowflake-connector-pythonpypi2.1.3, 3.6.0, 3.7.1, 3.12.2+4 more4.7.310
github.com/snowflakedb/gosnowflake/v2golangv2.0.2, v2.1.02.2.06
snowflake-jdbcmaven3.11.1, 3.13.22, 3.13.304.3.44
OSV records
GHSA-qqj6-54q6-cxv6

Charts affected

198 by stars
ChartLatestAffected imagesRadar Score
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
snowflake-sdk@1.6.6
3.3.0

Open the chart page →

6,745
vaultkubeblocksVerified publisher0.30.01 of 2See more

vault kubeblocks 0.30.0

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
github.com/snowflakedb/gosnowflake@v1.13.0
no fix listed

Open the chart page →

3,935
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.160.0799dc6cf12c9
github.com/snowflakedb/gosnowflake/v2@v2.1.0
2.2.0

Open the chart page →

2,875
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/snowflakedb/gosnowflake@v1.7.2-0.20240103203018-f1d625f17408
no fix listed

Open the chart page →

24,542
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
sasquatchlsst-sqre0.1.131 of 6See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
github.com/snowflakedb/gosnowflake@v1.6.1
no fix listed

Open the chart page →

12,797
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/snowflakedb/gosnowflake@v1.5.0
no fix listed

Open the chart page →

4,753
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/snowflakedb/gosnowflake@v1.7.2-0.20240103203018-f1d625f17408
no fix listed

Open the chart page →

24,504
mw-kube-agent-v3middleware-labsVerified publisher1.8.61 of 2See more

mw-kube-agent-v3 middleware-labs 1.8.6

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.21.507011b628e6b
github.com/snowflakedb/gosnowflake/v2@v2.0.2
2.2.0

Open the chart page →

1,830
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/snowflakedb/gosnowflake@v1.8.0
no fix listed

Open the chart page →

9,000
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
snowflake-sdk@2.1.0
3.3.0

Open the chart page →

2,259
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
github.com/snowflakedb/gosnowflake@v1.6.3
no fix listed

Open the chart page →

2,792
one-green-coreone-green-coreVerified publisher0.0.72 of 8See more

one-green-core one-green-core 0.0.7

2 of the 8 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/influxdb:2.0.8ba10ac9ba17a
github.com/snowflakedb/gosnowflake@v1.3.4
no fix listed
library/telegraf:1.20.428e98eece020
github.com/snowflakedb/gosnowflake@v1.6.2
no fix listed

Open the chart page →

13,217
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/snowflakedb/gosnowflake@v1.18.0
no fix listed

Open the chart page →

5,847
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/snowflakedb/gosnowflake@v1.15.0
no fix listed

Open the chart page →

4,972
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
snowflake-sdk@2.1.0
3.3.0

Open the chart page →

2,259
soha-observabilityopensohaVerified publisher0.2.11 of 2See more

soha-observability opensoha 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.157.0f2f01157055a
github.com/snowflakedb/gosnowflake/v2@v2.1.0
2.2.0

Open the chart page →

745
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150

Container images carrying it

102 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.