Skip to content

Upgrade cryptography from 44.0.1 to 46.0.5#2777

Open
irajhedayati wants to merge 2 commits intosnowflakedb:mainfrom
irajhedayati:update-cryptography
Open

Upgrade cryptography from 44.0.1 to 46.0.5#2777
irajhedayati wants to merge 2 commits intosnowflakedb:mainfrom
irajhedayati:update-cryptography

Conversation

@irajhedayati
Copy link

Please answer these questions before submitting your pull requests. Thanks!

  1. What GitHub issue is this PR addressing? Make sure that there is an accompanying issue to your PR.

    Fixes SNOW-3183627: Address CVE-2026-26007 in cryptography 46.0.4 #2776

  2. Fill out the following pre-review checklist:

    • I am adding a new automated test(s) to verify correctness of my new code
    • I am adding new logging messages
    • I am adding a new telemetry message
    • I am modifying authorization mechanisms
    • I am adding new credentials
    • I am modifying OCSP code
    • I am adding a new dependency
  3. Please describe how your code solves the related issue.

This is to upgrade cryptography dependency to address CVE-2026-26007

  1. (Optional) PR for stored-proc connector:

@irajhedayati irajhedayati requested a review from a team as a code owner March 2, 2026 01:22
@github-actions
Copy link

github-actions bot commented Mar 2, 2026

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

@irajhedayati
Copy link
Author

I have read the CLA Document and I hereby sign the CLA

@irajhedayati
Copy link
Author

The build is failing with

Run gpg --quiet --batch --yes --decrypt --passphrase="$PARAMETERS_SECRET" \
gpg: gcry_kdf_derive failed: Invalid data
gpg: decryption failed: Bad session key
Error: Process completed with exit code 2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SNOW-3183627: Address CVE-2026-26007 in cryptography 46.0.4

1 participant