Skip to content
OpenAdvisories

Vendor

Snowflake

24 known vulnerabilities.

Products

Snowflake CLI 8 Snowflake Connector for Python 6 Snowflake JDBC Driver 5 Snowflake JDBC Driver (FIPS) 5 Snowflake JDBC Driver (Thin) 5 Snowflake PHP PDO Driver 5 Snowflake Go Driver 4 Snowflake Node.js Driver 4 Snowflake ODBC Driver 4 Snowflake Libsnowflakeclient 4 Snowflake Connector for .NET 2 Snowflake SQLAlchemy 1 Cortex Code CLI 1 Snowflake Connector for Python (Universal Core) 1 Snowflake Spark Connector 1 Snowflake Python APIs 1 Snowflake ODBC 1 Snowpark Python SDK 1 Terraform Provider for Snowflake 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-15925

    Improper TLS Hostname Verification in Snowflake Connector for Python

    Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-pa…

    Snowflake Snowflake Connector for Python datadog-agent-7.77-core-integrations snowflake-connector-python Wolfi PyPI
  • Critical 9.2
    CVE-2026-15183

    Input Validation Vulnerabilities in Snowflake Spark Connector

    Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or redirect COPY operat…

    Snowflake Snowflake Spark Connector
  • Critical 9.6
    CVE-2026-15062

    SQL Injection in Snowflake Snowpark Python SDK

    SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by emb…

    Snowflake Snowpark Python SDK