CVE-2022-42965: Snowflake Connector

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method

Affected products

• Snowflake Snowflake Connector: before 2.8.2 (fixed in 2.8.2)

Published 2022-11-09. Last modified 2026-06-17.