SNOW-717483: Safety (pyup.io) reports vulnerability in the dependent snowflake-connector-python library

[pjoshiAF]

Can we update the snowflake-connector-python version that fixes the following issue reported by safety?

  -> Vulnerability found in snowflake-connector-python version 2.7.7
   Vulnerability ID: 51802
   Affected spec: <2.8.2
   ADVISORY: Snowflake-connector-python 2.8.2 includes a fix for
   CVE-2022-42965: An exponential ReDoS (Regular Expression Denial of Service)
   can be triggered in the snowflake-connector-python PyPI package, when an
   attacker is able to supply arbitrary input to the undocumented
   get_file_transfer_type method.
   CVE-2022-42965
   For more information, please visit https://pyup.io/v/51802/f17

[sfc-gh-aling]

@pjoshiAF yes, please feel free to upgrade to the latest connector version 2.9.0 which includes the fix via pip install --upgrade snowflake-connector-python.

let me know if there's an issue you run into with the upgrade

[sfc-gh-dszmolka]

was fixed 1.5 years ago and not an issue with snowflake-sqlalchemy but instead the PythonConnector, marking this issue as closed