CVE-2026-86597
MediumAdvisory
Published 5 Oct 2026In the index since 6 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.001
- 2nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 198
- of 18,026 indexed, latest versions
- Container images
- 102
- deployed by those charts
- Fix available
- 4 of 5
- affected packages
Snowflake drivers writes sensitive information to logs
Carried by container images the latest versions of 198 of 18,026 indexed charts deploy, on 102 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.3.4, v1.5.0, v1.6.1, v1.6.2+23 more | no fix listed | 65 |
| snowflake-sdknpm | 1.6.1, 1.6.2, 1.6.6, 1.6.17+7 more | 3.3.0 | 18 |
| snowflake-connector-pythonpypi | 2.1.3, 3.6.0, 3.7.1, 3.12.2+4 more | 4.7.3 | 10 |
| github.com/ | v2.0.2, v2.1.0 | 2.2.0 | 6 |
| snowflake-jdbcmaven | 3.11.1, 3.13.22, 3.13.30 | 4.3.4 | 4 |
- OSV records
- GHSA-qqj6-54q6-cxv6
Charts affected
198 by stars
Container images carrying it
102 by charts deploying them
A fixed version is listed for 4 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | snowflake-jdbc | 4.3.4 | 80 |
| decisionrules/ | bb3a93224b5a | github.com/ snowflake-sdk | no fix listed 3.3.0 | 4 |
| hashicorp/ | 5be49781ecf7 | github.com/ | no fix listed | 3 |
| tykio/ | 1161bd297135 | github.com/ | no fix listed | 3 |
| tykio/ | 50b3e4f5398a | github.com/ | no fix listed | 3 |
| ghcr.io/ | 896fc7b18b1b | snowflake-connector-python | 4.7.3 | 3 |
| amancevice/ | 12a0a9e66550 | snowflake-connector-python | 4.7.3 | 2 |
| grafana/ | 7790f6f7fbd8 | github.com/ | no fix listed | 2 |
| grafana/ | f94b1c82957a | github.com/ | no fix listed | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | no fix listed | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ | no fix listed | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ | no fix listed | 2 |
| n8nio/ | 14c4285bc303 | snowflake-sdk | 3.3.0 | 2 |
| otel/ | 799dc6cf12c9 | github.com/ | 2.2.0 | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ | no fix listed | 2 |
| otel/ | a7343f018690 | github.com/ | no fix listed | 2 |
| apache/ | 64e58748b6b9 | snowflake-connector-python | 4.7.3 | 1 |
| apache/ | ce90bdc3d2af | snowflake-connector-python | 4.7.3 | 1 |
| apache/ | e5560ad0b86e | snowflake-connector-python | 4.7.3 | 1 |
| apecloud/ | 98abc64aa985 | github.com/ | no fix listed | 1 |
| broadinstitute/ | 656131886a08 | github.com/ | no fix listed | 1 |
| budibase/ | 44fe6feab985 | snowflake-sdk | 3.3.0 | 1 |
| burningalchemist/ | b8e4757c7def | github.com/ | no fix listed | 1 |
| bytebase/ | 0b3a44dfac3e | github.com/ | 2.2.0 | 1 |
| curtismager20/ | 454df7505469 | github.com/ | no fix listed | 1 |
| dremio/ | 80ed2e3b7c43 | snowflake-jdbc | 4.3.4 | 1 |
| flyway/ | 45b5d7cdc75a | snowflake-jdbc | 4.3.4 | 1 |
| flyway/ | 80f12c80502b | snowflake-jdbc | 4.3.4 | 1 |
| grafana/ | 3364714a2f64 | github.com/ | no fix listed | 1 |
| grafana/ | f6cbec9409be | github.com/ | no fix listed | 1 |
| grafana/ | 01a63f4e032c | github.com/ | no fix listed | 1 |
| grafana/ | 06bdcbb51fc2 | github.com/ | no fix listed | 1 |
| grafana/ | 0f4434c92b3e | github.com/ | no fix listed | 1 |
| grafana/ | 491b0578c049 | github.com/ | no fix listed | 1 |
| grafana/ | 84b76d56c594 | github.com/ | no fix listed | 1 |
| grafana/ | 8c7256f412fe | github.com/ | no fix listed | 1 |
| grafana/ | b8ec653c4423 | github.com/ | no fix listed | 1 |
| grafana/ | c3dac4e26471 | github.com/ | no fix listed | 1 |
| grafana/ | f111cce83551 | github.com/ | no fix listed | 1 |
| grafana/ | f50931848bd8 | github.com/ | no fix listed | 1 |
| grafana/ | 09d8c3ce4f3a | github.com/ | no fix listed | 1 |
| growthbook/ | 67b7cd7d12a1 | snowflake-sdk | 3.3.0 | 1 |
| growthbook/ | c8a124f55dca | snowflake-sdk | 3.3.0 | 1 |
| hashicorp/ | 0b01ed3924e6 | github.com/ | no fix listed | 1 |
| hashicorp/ | 47f14a6acb98 | github.com/ | no fix listed | 1 |
| hashicorp/ | 5520cc26271c | github.com/ | no fix listed | 1 |
| hashicorp/ | 750bb37c1638 | github.com/ | no fix listed | 1 |
| hashicorp/ | 755355002715 | github.com/ | no fix listed | 1 |
| hashicorp/ | b2177a8bfe85 | github.com/ | no fix listed | 1 |
| hashicorp/ | bbb7f98dc67d | github.com/ | no fix listed | 1 |