Skip to content
OpenAdvisories

Package · Go

github.com/snowflakedb/gosnowflake

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.5
    CVE-2026-86597

    Sensitive information written to logs by Snowflake drivers

    Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic…

    Snowflake Snowflake Connector for Python Snowflake JDBC Driver (FIPS) Snowflake PHP PDO Driver npm Maven PyPI Go
  • Low 3.3
    CVE-2025-46327

    Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

    gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration…

    snowflakedb gosnowflake github.com/snowflakedb/gosnowflake Go
  • High 7.3
    CVE-2023-34231

    Snowflake Golang Driver vulnerable to Command Injection

    gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via single sign-on (SSO) browser URL authentication. In order to exploit the potential for command injection, an attack…

    snowflakedb gosnowflake github.com/snowflakedb/gosnowflake Go