Skip to content
OpenAdvisories

Package · npm

snowflake-sdk

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2023-34232

    Snowflake NodeJS Driver vulnerable to Command Injection

    snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to b…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm