Skip to contentSnowflake Connector vulnerabilities
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moreNodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration fileCVE-2025-46328Fix available3.3 Low
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector for .NET has race condition when checking access to Easy Logging configuration fileCVE-2025-46326Fix available3.3 Low
- snowflake connector, snowflakedb snowflake-connector-python +1 moreThe Snowflake Connector for Python uses insecure cache files permissionsCVE-2025-24795Fix available4.4 Medium
- snowflake connector, snowflakedb snowflake-connector-python +1 moreThe Snowflake Connector for Python uses insecure deserialization of the OCSP response cacheCVE-2025-24794Fix available6.7 Medium
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Connector for Python has an SQL Injection in write_pandasCVE-2025-24793Fix available7.0 High
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector for .NET has weak temporary files permissionsCVE-2025-24788Fix available5.0 Medium
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moresnowflake-connector-nodejs has incorrect validation of temporary credential cache file permissionsCVE-2025-24791Fix available4.4 Medium
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Connector for Python has sensitive data in logsCVE-2024-49750Fix available5.5 Medium
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector .NET does not properly check the Certificate Revocation List (CRL)CVE-2023-51662Fix available6.0 Medium
- snowflake connector, snowflakedb snowflake-connector-net +1 moreSnowflake Connector vulnerable to Command InjectionCVE-2023-34230Fix available7.3 High
- snowflake connector, snowflakedb snowflake-connector-python +1 moreSnowflake Python Connector vulnerable to Command InjectionCVE-2023-34233Public exploitFix available7.3 High
- snowflake connector, snowflakedb snowflake-connector-nodejs +1 moreSnowflake NodeJS Driver vulnerable to Command InjectionCVE-2023-34232Fix available7.3 High
- snowflake connector, snowflake-connector-python +1 moreExponential ReDoS in snowflake-connector-python leads to denial of serviceCVE-2022-42965Fix available3.7 Low