Browse CVEs

CRITICAL 9.6 CVE-2026-13751 Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reade… Snowflake Cli 3.19.0+ Fix from $2,3002026-06-29 HIGH 8.0 CVE-2026-13752 Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by sup… Snowflake Cli 3.19.0+ Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13744 Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted… Snowflake Cli 3.19.0+ Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13749 Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code executi… Snowflake Cli 3.19.0+ Fix from $1,9502026-06-29 MEDIUM 6.3 CVE-2026-13748 Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted … Snowflake Cli 3.19.0+ Fix from $1,6002026-06-29 MEDIUM 5.5 CVE-2026-13750 Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent l… Snowflake Cli 3.19.0+ Fix from $1,6002026-06-29 MEDIUM 5.4 CVE-2026-13746 Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this i… Snowflake Cli 3.19.0+ Fix from $1,6002026-06-29 MEDIUM 5.5 CVE-2026-3293 A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net… Snowflake Jdbc 4.0.1+ Fix from $1,6002026-02-27 HIGH 7.0 CVE-2025-46326 snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-… Snowflake Connector 4.4.1+ Fix from $1,9502025-04-28 HIGH 7.0 CVE-2025-46327 gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) … Gosnowflake 1.13.3+ Fix from $1,9502025-04-28 HIGH 7.0 CVE-2025-46328 snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time… Snowflake Connector 2.0.4+ Fix from $1,9502025-04-28 HIGH 7.8 CVE-2025-24794 The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op… Snowflake Connector 3.13.1+ Fix from $1,9502025-01-29 HIGH 7.0 CVE-2025-24793 The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op… Snowflake Connector 3.13.1+ Fix from $1,9502025-01-29 MEDIUM 5.5 CVE-2025-24788 snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET … Snowflake Connector 4.3.0+ Fix from $1,6002025-01-29 MEDIUM 5.5 CVE-2025-24795 The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op… Snowflake Connector 3.13.1+ Fix from $1,6002025-01-29 HIGH 7.8 CVE-2025-24789 Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered an… Snowflake Jdbc 3.22.0+ Fix from $1,9502025-01-29 MEDIUM 5.5 CVE-2025-24790 Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered an… Snowflake Jdbc 3.22.0+ Fix from $1,6002025-01-29 MEDIUM 5.5 CVE-2025-24791 snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File… Snowflake Connector 2.0.2+ Fix from $1,6002025-01-29 MEDIUM 5.9 CVE-2024-43382 Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage… Snowflake Jdbc 3.20.0+ Fix from $1,6002024-10-30 MEDIUM 5.5 CVE-2024-49750 The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op… Snowflake Connector 3.12.3+ Fix from $1,6002024-10-24 MEDIUM 6.5 CVE-2024-42474 Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the… Streamlit 1.37.0+ Fix from $1,6002024-08-12 HIGH 7.8 CVE-2024-28851 The Snowflake Hive metastore connector provides an easy way to query Hive-managed data via Snowflake. Snowflake Hive MetaStore Connector has addresse… Snowflake Hive Metastore Connector 2024-02-09+ Fix from $1,9502024-03-15 HIGH 7.5 CVE-2023-51662 The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently … Snowflake Connector 2.1.5+ Fix from $1,9502023-12-22 HIGH 8.8 CVE-2023-34230 snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In … Snowflake Connector 2.0.18+ Fix from $1,9502023-06-08 HIGH 8.8 CVE-2023-34232 snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in … Snowflake Connector 1.6.21+ Fix from $1,9502023-06-08 HIGH 8.8 CVE-2023-34233 The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op… Snowflake Connector 3.0.2+ Fix from $1,9502023-06-08 HIGH 8.8 CVE-2023-34231 gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via singl… Gosnowflake 1.6.19+ Fix from $1,9502023-06-08 HIGH 8.8 CVE-2023-30535 Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake … Snowflake Jdbc 3.13.29+ Fix from $1,9502023-04-14 MEDIUM 6.1 CVE-2023-27494 Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0.… Streamlit 0.81.0+ Fix from $1,6002023-03-16 HIGH 7.5 CVE-2022-42965 An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able… Snowflake Connector 2.8.2+ Fix from $1,9502022-11-09