OCF Connector Security Fix Summary

Alation Cloud Service Applies to Alation Cloud Service instances of Alation

Customer Managed Applies to customer-managed instances of Alation

This topic provides a summary of security fixes included in Open Connector Framework (OCF) connectors. It is intended as a quick reference for security-related updates only. For a complete list of changes in each connector release, including new features, improvements, and non-security fixes, refer to the OCF Connector Release Notes for 2026.

May 06, 2026

Salesforce OCF Connector: Version 25.0.9613

This connector version addresses the following Common Vulnerability and Exposure (CVE): CVE-2025-68973, CVE-2025-68972, CVE-2025-32988, CVE-2025-32990, CVE-2026-1584, CVE-2024-12243, CVE-2025-14831, CVE-2025-32989, CVE-2025-6395, CVE-2025-9820, CVE-2025-15467, CVE-2026-31789, CVE-2025-69419, CVE-2025-69421, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2025-11187, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2026-22795, CVE-2026-22796, CVE-2026-31790, CVE-2026-2673, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-24515, CVE-2026-22695, CVE-2026-22801, CVE-2026-25646, CVE-2026-33416, CVE-2026-33636, CVE-2026-34757, CVE-2025-13151, CVE-2026-40200, CVE-2026-6042, CVE-2026-22184, CVE-2026-2717, GHSA-72hv-8253-57qq, CVE-2026-33870, CVE-2025-67735, CVE-2026-33871, CVE-2026-34479, CVE-2025-68161, CVE-2026-34477, CVE-2026-34480, and CVE-2025-67030. (AL-235947)

April 29, 2026

Oracle OCF Connector: Version 1.8.7

This connector version addresses the following Common Vulnerability and Exposure (CVE): CVE-2024-58251, CVE-2025-46394, CVE-2025-68973, CVE-2025-68972, CVE-2025-32988, CVE-2025-32990, CVE-2026-1584, CVE-2024-12243, CVE-2025-14831, CVE-2025-32989, CVE-2025-6395, CVE-2025-9820, CVE-2025-15467, CVE-2026-31789, CVE-2025-69419, CVE-2025-69421, CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2025-11187, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2026-22795, CVE-2026-22796, CVE-2026-31790, CVE-2026-2673, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-24515, CVE-2025-64720, CVE-2025-65018, CVE-2025-66293, CVE-2026-22695, CVE-2026-22801, CVE-2026-25646, CVE-2026-33416, CVE-2026-33636, CVE-2025-64505, CVE-2025-64506, CVE-2026-34757, CVE-2025-13151, CVE-2026-40200, CVE-2026-6042, CVE-2026-22184, CVE-2026-27171, GHSA-72hv-8253-57qq, CVE-2026-33870, CVE-2025-67735, CVE-2026-33871, CVE-2026-34479, CVE-2025-68161, CVE-2026-34477, CVE-2026-34480, CVE-2025-12194, CVE-2025-67030. (AL-238379)

April 22, 2026

Snowflake OCF Connector: Version 2.10.1

This connector version addresses the following Common Vulnerability and Exposures (CVEs): CVE-2025-48924, CVE-2025-8916, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480. (AL-238552).

Teradata OCF Connector: Version 1.5.5

This connector version addresses the following Common Vulnerability and Exposures (CVEs): CVE-2025-48924, CVE-2025-8916, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480. (AL-238553).

April 01, 2026

Snowflake OCF Connector: Version 2.9.4

This connector version addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2026-32767, CVE-2026-32777, CVE-2026-32778, CVE-2025-67030, CVE-2026-33870, CVE-2026-33871, CVE-2026-33636, CVE-2026-33416. (AL-233260) (AL-234481)

SQL Server OCF Connector: Version 1.8.0

This connector version addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2025-59250, CVE-2024-58251, CVE-2024-12243, CVE-2025-11187, CVE-2025-12194, CVE-2025-13151, CVE-2025-14831, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, CVE-2025-46394, CVE-2025-6395, CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018, CVE-2025-66199, CVE-2025-66293, CVE-2025-67735, CVE-2025-68160, CVE-2025-68161, CVE-2025-68972, CVE-2025-68973, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2025-9820, CVE-2026-1584, CVE-2026-22695, CVE-2026-22795, CVE-2026-22796, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2026-33416. (AL-213750)

Teradata OCF Connector: Version 1.5.4

This connector version addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2026-32767, CVE-2026-32777, CVE-2026-32778, CVE-2025-67030, CVE-2026-33870, CVE-2026-33871, CVE-2026-33636, CVE-2026-33416. (AL-233260) (AL-234481)

March 25, 2026

MySQL OCF Connector: Version 2.2.1

This connector version addresses the following Common Vulnerabilities and Exposure (CVE): CVE-2026-22184 (AL-232129)

March 18, 2026

Snowflake OCF Connector: Version 2.9.2

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-230704)

CVE-2026-22184, CVE-2025-32988, CVE-2025-32990, CVE-2026-25646, GHSA-72hv-8253-57qq

Teradata OCF Connector: Version 1.5.1

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-230704)

CVE-2026-22184, CVE-2025-32988, CVE-2025-32990, CVE-2026-25646, GHSA-72hv-8253-57qq

March 11, 2026

PostgreSQL OCF Connector: Version 2.1.0

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-209430)

CVE-2025-15467, CVE-2025-32988, CVE-2025-32990, CVE-2026-1584, CVE-2025-69419, CVE-2025-69421, CVE-2026-25210, CVE-2026-22695, CVE-2026-22801, CVE-2026-25646, GHSA-72hv-8253-57qq

March 05, 2026

Databricks Unity Catalog OCF Connector: Version 3.5.1

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-228290)

CVE-2025-15467, CVE-2025-32988, CVE-2026-1584, CVE-2025-69419, CVE-2026-22695, GHSA-72hv-8253-57qq (jackson-core) (GitHub Advisory, High), CVE-2025-67735, CVE-2025-68161, CVE-2025-69421, CVE-2025-9820, CVE-2024-12243, CVE-2025-14831, CVE-2025-32989, CVE-2025-32990, CVE-2025-6395, CVE-2025-11187, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2025-13151, CVE-2026-22795, CVE-2026-22796, CVE-2026-25210, CVE-2026-22801, CVE-2026-25646, CVE-2025-67735 (Netty), CVE-2026-24515.

MySQL OCF Connector: Version 2.1.3

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-228290)

CVE-2025-32988 (gnutls), CVE-2025-32990 (gnutls), CVE-2026-1584 (gnutls), CVE-2026-25646 (libpng), GHSA-72hv-8253-57qq (jackson-core) (GitHub Advisory, High), CVE-2024-12243 (gnutls), CVE-2025-14831 (gnutls), CVE-2025-32989 (gnutls), CVE-2025-6395 (gnutls), CVE-2025-9820 (gnutls), CVE-2026-25210 (libexpat), CVE-2026-24515 (libexpat).

Power BI Scanner OCF Connector: Version 2.11.2

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):(AL-228290)

CVE-2025-15467, CVE-2025-32988, CVE-2026-1584, CVE-2025-69419, CVE-2026-22695, GHSA-72hv-8253-57qq (jackson-core) (GitHub Advisory, High), CVE-2025-69421, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2024-12243, CVE-2025-14831, CVE-2025-32989, CVE-2025-6395, CVE-2025-9820, CVE-2025-11187, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2026-22795, CVE-2026-22796, CVE-2025-13151, CVE-2026-25210, CVE-2026-24515.

February 04, 2026

MySQL OCF Connector: Version 2.1.0

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs): (AL-222514)

CVE-2019-17571, CVE-2019-20444, CVE-2019-20445, CVE-2020-8908, CVE-2020-11612, CVE-2021-29425, CVE-2021-4104, CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-22569, CVE-2021-37136, CVE-2021-37137, CVE-2021-43797, CVE-2022-23302, CVE-2022-23305, CVE-2022-23307, CVE-2022-24823, CVE-2022-25647, CVE-2022-3171, CVE-2022-3509, CVE-2022-3510, CVE-2023-0465, CVE-2023-0466, CVE-2023-1255, CVE-2023-26464, CVE-2023-2650, CVE-2023-2975, CVE-2023-2976, CVE-2023-3446, CVE-2023-34462, CVE-2023-3817, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-52425, CVE-2023-52426, CVE-2023-5363, CVE-2023-5678, CVE-2023-6129, CVE-2023-6237, CVE-2024-0727, CVE-2024-2511, CVE-2024-28757, CVE-2024-29025, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-4603, CVE-2024-4741, CVE-2024-47535, CVE-2024-47554, CVE-2024-50602, CVE-2024-5535, CVE-2024-6119, CVE-2024-7254, CVE-2024-9143, CVE-2025-25193, CVE-2025-26519, CVE-2025-48924, CVE-2025-55163, CVE-2025-58056, CVE-2025-58057, CVE-2025-67735

Snowflake OCF Connector: Version 2.9.0

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs): (AL-22244)

CVE-2024-58251, CVE-2025-46394, CVE-2025-68973, CVE-2025-68972, CVE-2025-15467, CVE-2025-69419, CVE-2025-69421, CVE-2025-11187, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69420, CVE-2026-22795, CVE-2026-22796, CVE-2025-13151, CVE-2025-64720, CVE-2025-65018, CVE-2025-66293, CVE-2026-22695, CVE-2026-22801, CVE-2025-64505, CVE-2025-64506, CVE-2025-67735, CVE-2025-68161, CVE-2025-12194

Teradata OCF Connector: Version 1.4.0

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs):

CVE-2024-58251, CVE-2025-11187, CVE-2025-12194, CVE-2025-13151, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-46394, CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018, CVE-2025-66199, CVE-2025-66293, CVE-2025-67735, CVE-2025-68160, CVE-2025-68161, CVE-2025-68972, CVE-2025-68973, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22695, CVE-2026-22795, CVE-2026-22796, CVE-2026-22801

January 28, 2026

Databricks Unity Catalog OCF Connector: Version 3.5.0

This connector version addresses the following Common Vulnerability and Exposure (CVE): CVE-2024-49194. (AL-219523)

January 07, 2026

Amazon Redshift OCF Connector: Version 1.11.2

This connector version addresses the following Common Vulnerability and Exposure (CVE): CVE-2021-4104. (AL-216001, AL-217169).

Azure Power BI Scanner OCF Connector: Version 2.10.10

This connector version (SDK version 4.14.1) addresses the following Common Vulnerabilities and Exposures (CVEs): CVE-2025-67735, CVE-2025-68161 (AL-214670)

Salesforce OCF Connector: Version 25.0.9494

This connector version (SDK version 4.14.0) addresses the following Common Vulnerabilities and Exposures (CVEs): (AL-216332)

CVE-2024-5535, CVE-2024-45491, CVE-2024-45492, CVE-2025-26519, CVE-2025-21587, CVE-2025-59375, CVE-2025-55163, CVE-2024-45490, CVE-2025-30749, CVE-2025-9230, CVE-2025-24970, CVE-2025-50059, CVE-2025-58057, CVE-2025-53066, CVE-2025-58056, CVE-2024-21147, CVE-2024-4741, CVE-2024-8176, CVE-2024-6119, CVE-2025-50106, CVE-2025-48924, CVE-2025-21502, CVE-2025-30754, CVE-2024-12133, CVE-2024-21145, CVE-2025-9232, CVE-2024-21235, CVE-2024-47535, CVE-2025-53057, CVE-2024-21140, CVE-2025-30761, CVE-2025-30698, CVE-2024-9143, CVE-2025-25193, CVE-2024-13176, CVE-2024-50602, CVE-2024-21208, CVE-2024-21210, CVE-2024-21131, CVE-2025-46394, CVE-2024-21217, CVE-2024-21144, CVE-2024-21138, CVE-2024-58251