StackRadar

CVE-2026-86597

Medium

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
198
of 18,026 indexed, latest versions
Container images
102
deployed by those charts
Fix available
4 of 5
affected packages

Snowflake drivers writes sensitive information to logs

Carried by container images the latest versions of 198 of 18,026 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
github.com/snowflakedb/gosnowflakegolangv1.3.4, v1.5.0, v1.6.1, v1.6.2+23 moreno fix listed65
snowflake-sdknpm1.6.1, 1.6.2, 1.6.6, 1.6.17+7 more3.3.018
snowflake-connector-pythonpypi2.1.3, 3.6.0, 3.7.1, 3.12.2+4 more4.7.310
github.com/snowflakedb/gosnowflake/v2golangv2.0.2, v2.1.02.2.06
snowflake-jdbcmaven3.11.1, 3.13.22, 3.13.304.3.44
OSV records
GHSA-qqj6-54q6-cxv6

Charts affected

198 by stars
ChartLatestAffected imagesRadar Score
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
tykquench-tykVerified publisher0.0.231 of 2See more

tyk quench-tyk 0.0.23

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/tykdigest-pinned2d16b28a72f3
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

121
vaultquench-vaultVerified publisher0.0.111 of 1See more

vault quench-vault 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vaultdigest-pinned3962e187d099
github.com/snowflakedb/gosnowflake@v1.19.0
no fix listed

Open the chart page →

39
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
snowflake-connector-python@3.12.2
4.7.3

Open the chart page →

23,519
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

9,291
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
snowflake-connector-python@3.6.0
4.7.3

Open the chart page →

11,442
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/snowflakedb/gosnowflake@v1.8.0
no fix listed

Open the chart page →

2,227
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
vault-devsikalabs0.2.01 of 1See more

vault-dev sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:latest47f14a6acb98
github.com/snowflakedb/gosnowflake@v1.19.0
no fix listed

Open the chart page →

232
infisicalsinextraVerified publisher0.6.11 of 1See more

infisical sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.166b911e3938ac
snowflake-sdk@2.3.6
3.3.0

Open the chart page →

3,361
tracing-stacksnubisks0.1.01 of 8See more

tracing-stack snubisks 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

6,899
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
github.com/snowflakedb/gosnowflake@v1.6.1
no fix listed

Open the chart page →

7,761
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
github.com/snowflakedb/gosnowflake@v1.5.0
no fix listed

Open the chart page →

4,751
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
tyk-control-planetyk-helm5.4.12 of 7See more

tyk-control-plane tyk-helm 5.4.1

2 of the 7 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

4,053
tyk-dashboardtyk-helm5.4.11 of 1See more

tyk-dashboard tyk-helm 5.4.1

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

826
tyk-data-planetyk-helm5.4.11 of 3See more

tyk-data-plane tyk-helm 5.4.1

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

941
tyk-stacktyk-helm5.4.12 of 7See more

tyk-stack tyk-helm 5.4.1

2 of the 7 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
github.com/snowflakedb/gosnowflake@v1.18.1
no fix listed

Open the chart page →

4,043
vaultvault-helmVerified publisher0.4.11 of 1See more

vault vault-helm 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:2.1.05520cc26271c
github.com/snowflakedb/gosnowflake@v1.19.0
no fix listed

Open the chart page →

289
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
snowflake-sdk@2.1.0
3.3.0

Open the chart page →

7,503
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
snowflake-jdbc@3.11.1
4.3.4

Open the chart page →

21,150
vaultwener0.34.11 of 2See more

vault wener 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/snowflakedb/gosnowflake@v1.19.0
no fix listed

Open the chart page →

760
vaultwenerme0.34.11 of 2See more

vault wenerme 0.34.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
github.com/snowflakedb/gosnowflake@v1.19.0
no fix listed

Open the chart page →

760
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/snowflakedb/gosnowflake@v1.6.24
no fix listed

Open the chart page →

15,721
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed

Open the chart page →

2,568
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-86597.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
snowflake-jdbc@3.13.22
4.3.4

Open the chart page →

6,098

Container images carrying it

102 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/snowflakedb/gosnowflake@v1.6.18
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.