Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2022-42965

Exponential ReDoS in snowflake-connector-python leads to denial of service

Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

snowflake-connector-python snowflake-connector-python

  • unspecified to < 2.8.2affected

References