Skip to content
OpenAdvisories

Package · npm

snowflake-sdk

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2025-46328

    NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

    snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggi…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm