Product · Snowflake

Snowflake Node.js Driver

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.2

CVE-2026-86600

Workload identity attestation generated before login host validation in Snowflake drivers

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configu…

Snowflake Snowflake Connector for Python Snowflake PHP PDO Driver Snowflake JDBC Driver (FIPS)

Sep 8, 2026
High 7.4

CVE-2026-85525

Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification f…

Snowflake Snowflake Connector for Python Snowflake JDBC Driver Snowflake JDBC Driver (Thin)

Sep 4, 2026