cvedb.io
CVE-2022-42965
LOW · CVSS 3.7
EPSS exploitation probability: 0%
Published 2022-11-09T20:15:10.820 · Last modified 2026-06-17T05:05:40.890

Summary

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method

Affected products

snowflake — snowflake_connector

Does this affect you?

Add your gear to cvedb and we'll alert you only when snowflake ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.