Snowflakedb vulnerabilities

Products

• Snowflake-connector-python 6
• Snowflake-jdbc 5
• Snowflake-connector-net 4
• Snowflake-connector-nodejs 3
• Gosnowflake 2
• Libsnowflakeclient 2

Newest

• snowflake jdbc, snowflakedb snowflake-jdbc +1 more snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos CVE-2026-3293 Fix available 4.8 MediumFebruary 27, 2026
• snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 more Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs CVE-2025-46329 3.3 LowApril 29, 2025
• snowflakedb libsnowflakeclient, snowflake connector for c\/c\+\+ +1 more Snowflake Connector for C/C++ retries malformed requests CVE-2025-46330 3.3 LowApril 29, 2025
• snowflake connector, snowflakedb snowflake-connector-nodejs +1 more NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file CVE-2025-46328 Fix available 3.3 LowApril 28, 2025
• snowflake gosnowflake Go Snowflake Driver has race condition when checking access to Easy Logging configuration file CVE-2025-46327 Fix available 3.3 LowApril 28, 2025
• snowflake connector, snowflakedb snowflake-connector-net +1 more Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file CVE-2025-46326 Fix available 3.3 LowApril 28, 2025
• snowflake jdbc, snowflakedb snowflake-jdbc +1 more Snowflake JDBC Driver client-side encryption key in DEBUG logs CVE-2025-27496 Fix available 3.3 LowMarch 13, 2025
• snowflake connector, snowflakedb snowflake-connector-python +1 more The Snowflake Connector for Python uses insecure cache files permissions CVE-2025-24795 Fix available 4.4 MediumJanuary 29, 2025
• snowflake connector, snowflakedb snowflake-connector-python +1 more The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache CVE-2025-24794 Fix available 6.7 MediumJanuary 29, 2025
• snowflake connector, snowflakedb snowflake-connector-python +1 more Snowflake Connector for Python has an SQL Injection in write_pandas CVE-2025-24793 Fix available 7.0 HighJanuary 29, 2025
• snowflake connector, snowflakedb snowflake-connector-net +1 more Snowflake Connector for .NET has weak temporary files permissions CVE-2025-24788 Fix available 5.0 MediumJanuary 29, 2025
• snowflake jdbc, snowflakedb snowflake-jdbc +1 more Snowflake JDBC uses insecure temporary credential cache file permissions CVE-2025-24790 Fix available 4.4 MediumJanuary 29, 2025
• snowflake jdbc, snowflakedb snowflake-jdbc +1 more Snowflake JDBC allows an untrusted search path on Windows CVE-2025-24789 Fix available 7.8 HighJanuary 29, 2025
• snowflake connector, snowflakedb snowflake-connector-nodejs +1 more snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions CVE-2025-24791 Fix available 4.4 MediumJanuary 29, 2025
• snowflakedb pdo snowflake Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error CVE-2025-24792 4.4 MediumJanuary 29, 2025
• snowflake connector, snowflakedb snowflake-connector-python +1 more Snowflake Connector for Python has sensitive data in logs CVE-2024-49750 Fix available 5.5 MediumOctober 24, 2024
• snowflake hive metastore connector, snowflakedb snowflake-hive-metastore-connector +1 more Elevation of privilege in Snowflake Hive MetaStore Connector Helper script CVE-2024-28851 4.0 MediumMarch 15, 2024
• snowflake connector, snowflakedb snowflake-connector-net +1 more Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) CVE-2023-51662 Fix available 6.0 MediumDecember 22, 2023
• snowflake connector, snowflakedb snowflake-connector-net +1 more Snowflake Connector vulnerable to Command Injection CVE-2023-34230 Fix available 7.3 HighJune 8, 2023
• snowflake connector, snowflakedb snowflake-connector-python +1 more Snowflake Python Connector vulnerable to Command Injection CVE-2023-34233 Public exploitFix available 7.3 HighJune 8, 2023
• snowflake connector, snowflakedb snowflake-connector-nodejs +1 more Snowflake NodeJS Driver vulnerable to Command Injection CVE-2023-34232 Fix available 7.3 HighJune 8, 2023
• snowflake gosnowflake Snowflake Golang Driver vulnerable to Command Injection CVE-2023-34231 Fix available 7.3 HighJune 8, 2023
• snowflake jdbc, snowflakedb snowflake-jdbc +1 more Snowflake JDBC vulnerable to command injection via SSO URL authentication CVE-2023-30535 Fix available 7.3 HighApril 14, 2023
• snowflake connector, snowflake-connector-python +1 more Exponential ReDoS in snowflake-connector-python leads to denial of service CVE-2022-42965 Fix available 3.7 LowNovember 9, 2022