Package · PyPI

apache-airflow-providers-snowflake

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.3

CVE-2026-81930

Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain

Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `https://{account}.snowflakecomputing.com/api/v2/statements`, so an `account` val…

Apache Software Foundation Apache Airflow Snowflake provider apache-airflow-providers-snowflake PyPI

Sep 29, 2026
Critical 9.8

CVE-2025-50213

Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and stage parameters were add…

Apache Software Foundation Apache Airflow Providers Snowflake airflow-3-bitnami-compat apache-airflow-providers-snowflake Wolfi PyPI

Jun 24, 2025