Vulnerability index

Browse CVEs

32 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Snowflake Cli CRITICAL 9.6
CVE-2026-13751

Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery. The SQL statement reade…

Fix: 3.19.0+
Fix from $2,300 2026-06-29
Snowflake Cli HIGH 8.0
CVE-2026-13752

Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by sup…

Fix: 3.19.0+
Fix from $1,950 2026-06-29
Snowflake Cli HIGH 8.8
CVE-2026-13744

Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted…

Fix: 3.19.0+
Fix from $1,950 2026-06-29
Snowflake Cli HIGH 8.8
CVE-2026-13749

Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code executi…

Fix: 3.19.0+
Fix from $1,950 2026-06-29
Snowflake Cli MEDIUM 6.3
CVE-2026-13748

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted …

Fix: 3.19.0+
Fix from $1,600 2026-06-29
Snowflake Cli MEDIUM 5.5
CVE-2026-13750

Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be written to persistent l…

Fix: 3.19.0+
Fix from $1,600 2026-06-29
Snowflake Cli MEDIUM 5.4
CVE-2026-13746

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this i…

Fix: 3.19.0+
Fix from $1,600 2026-06-29
Snowflake Jdbc MEDIUM 5.5
CVE-2026-3293

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net…

Fix: 4.0.1+
Fix from $1,600 2026-02-27
Snowflake Connector HIGH 7.0
CVE-2025-46326

snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-…

Fix: 4.4.1+
Fix from $1,950 2025-04-28
Gosnowflake HIGH 7.0
CVE-2025-46327

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) …

Fix: 1.13.3+
Fix from $1,950 2025-04-28
Snowflake Connector HIGH 7.0
CVE-2025-46328

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time…

Fix: 2.0.4+
Fix from $1,950 2025-04-28
Snowflake Connector HIGH 7.8
CVE-2025-24794

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op…

Fix: 3.13.1+
Fix from $1,950 2025-01-29
Snowflake Connector HIGH 7.0
CVE-2025-24793

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op…

Fix: 3.13.1+
Fix from $1,950 2025-01-29
Snowflake Connector MEDIUM 5.5
CVE-2025-24788

snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET …

Fix: 4.3.0+
Fix from $1,600 2025-01-29
Snowflake Connector MEDIUM 5.5
CVE-2025-24795

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op…

Fix: 3.13.1+
Fix from $1,600 2025-01-29
Snowflake Jdbc HIGH 7.8
CVE-2025-24789

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered an…

Fix: 3.22.0+
Fix from $1,950 2025-01-29
Snowflake Jdbc MEDIUM 5.5
CVE-2025-24790

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered an…

Fix: 3.22.0+
Fix from $1,600 2025-01-29
Snowflake Connector MEDIUM 5.5
CVE-2025-24791

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake NodeJS Driver. File…

Fix: 2.0.2+
Fix from $1,600 2025-01-29
Snowflake Jdbc MEDIUM 5.9
CVE-2024-43382

Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage…

Fix: 3.20.0+
Fix from $1,600 2024-10-30
Snowflake Connector MEDIUM 5.5
CVE-2024-49750

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op…

Fix: 3.12.3+
Fix from $1,600 2024-10-24
Streamlit MEDIUM 6.5
CVE-2024-42474

Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the…

Fix: 1.37.0+
Fix from $1,600 2024-08-12
Snowflake Hive Metastore Connector HIGH 7.8
CVE-2024-28851

The Snowflake Hive metastore connector provides an easy way to query Hive-managed data via Snowflake. Snowflake Hive MetaStore Connector has addresse…

Fix: 2024-02-09+
Fix from $1,950 2024-03-15
Snowflake Connector HIGH 7.5
CVE-2023-51662

The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently …

Fix: 2.1.5+
Fix from $1,950 2023-12-22
Snowflake Connector HIGH 8.8
CVE-2023-34230

snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In …

Fix: 2.0.18+
Fix from $1,950 2023-06-08
Snowflake Connector HIGH 8.8
CVE-2023-34232

snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in …

Fix: 1.6.21+
Fix from $1,950 2023-06-08
Snowflake Connector HIGH 8.8
CVE-2023-34233

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard op…

Fix: 3.0.2+
Fix from $1,950 2023-06-08
Gosnowflake HIGH 8.8
CVE-2023-34231

gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via singl…

Fix: 1.6.19+
Fix from $1,950 2023-06-08
Snowflake Jdbc HIGH 8.8
CVE-2023-30535

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake …

Fix: 3.13.29+
Fix from $1,950 2023-04-14
Streamlit MEDIUM 6.1
CVE-2023-27494

Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0.…

Fix: 0.81.0+
Fix from $1,600 2023-03-16
Snowflake Connector HIGH 7.5
CVE-2022-42965

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able…

Fix: 2.8.2+
Fix from $1,950 2022-11-09