Skip to content
OpenAdvisories

Package · NuGet

Snowflake.Data

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.3
    CVE-2025-46326

    Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file

    snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads lo…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • Medium 5.0
    CVE-2025-24788

    Snowflake Connector for .NET has weak temporary files permissions

    snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET in which files downloaded from stages are temporarily placed in a world-readable local directory, making them …

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • Medium 6.0
    CVE-2023-51662

    Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)

    The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently received a report about a vulnerability in the Snowflake Connector .NET where the checks against the Certifica…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • High 7.3
    CVE-2023-34230

    Snowflake Connector vulnerable to Command Injection

    snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establish…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet