Snowflake JDBC Driver (Thin)

3 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-114456

  Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

  Multiple Snowflake client drivers implementing the `authenticator=externalbrowser` single sign-on flow could have allowed an attacker to interfere with a user's login attempt through weaknesses in the local loopback callback listener used to receive the ident…

  Snowflake Snowflake Connector for Python Snowflake PHP PDO Driver Snowflake JDBC Driver (FIPS) Azure Linux
  Nov 4, 2026
• Medium 6.5
  CVE-2026-86597

  Sensitive information written to logs by Snowflake drivers

  Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic…

  Snowflake Snowflake Connector for Python Snowflake JDBC Driver (FIPS) Snowflake PHP PDO Driver Wolfi npm Maven PyPI Go
  Sep 8, 2026
• Medium 5.3
  CVE-2026-85528

  Snowflake JDBC Driver auto-configuration account validation permits credential redirection

  Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the ac…

  Snowflake Snowflake JDBC Driver Snowflake JDBC Driver (Thin) Snowflake JDBC Driver (FIPS)
  Sep 4, 2026