net.snowflake:snowflake-jdbc

7 results · Feed

• Medium 6.5
  CVE-2026-86597

  Sensitive information written to logs by Snowflake drivers

  Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic…

  Snowflake Snowflake Connector for Python Snowflake JDBC Driver Snowflake JDBC Driver (Thin) Wolfi npm Maven PyPI Go
  Sep 8, 2026
• Low 3.3
  CVE-2026-3293

  snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos

  A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manip…

  snowflakedb snowflake-jdbc net.snowflake:snowflake-jdbc Maven
  Feb 27, 2026
• Low 3.3
  CVE-2025-27496

  Snowflake JDBC Driver client-side encryption key in DEBUG logs

  Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would l…

  snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  Mar 13, 2025
• Medium 4.4
  CVE-2025-24790

  Snowflake JDBC uses insecure temporary credential cache file permissions

  Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. On Linux systems, when temporary credential caching…

  snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  Jan 29, 2025
• High 7.8
  CVE-2025-24789

  Snowflake JDBC allows an untrusted search path on Windows

  Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. When the EXTERNALBROWSER authentication method is u…

  snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  Jan 29, 2025
• Medium 5.9
  CVE-2024-43382

  Snowflake JDBC Security Advisory

  Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an encrypted stage without the additional layer of protection provided by client side encryption.

  trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Wolfi Maven
  Oct 30, 2024
• High 7.3
  CVE-2023-30535

  Snowflake JDBC vulnerable to command injection via SSO URL authentication

  Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, public…

  snowflakedb snowflake-jdbc net.snowflake:snowflake-jdbc Maven
  Apr 14, 2023