Skip to content
OpenAdvisories

Vendor

snowflakedb

23 known vulnerabilities.

Products

snowflake-connector-python 5 snowflake-jdbc 5 snowflake-connector-net 4 snowflake-connector-nodejs 3 gosnowflake 2 libsnowflakeclient 2 snowflake-hive-metastore-connector 1 pdo_snowflake 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.0
    CVE-2025-24793

    Snowflake Connector for Python has an SQL Injection in write_pandas

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A functio…

    snowflakedb snowflake-connector-python airflow snowflake-connector-python Wolfi PyPI
  • High 7.8
    CVE-2025-24789

    Snowflake JDBC allows an untrusted search path on Windows

    Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediated a vulnerability in the Snowflake JDBC Driver. When the EXTERNALBROWSER authentication method is u…

    snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven
  • High 7.3
    CVE-2023-34230

    Snowflake Connector vulnerable to Command Injection

    snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establish…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • High 7.3
    CVE-2023-34233 Public exploit

    Snowflake Python Connector vulnerable to Command Injection

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL auth…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • High 7.3
    CVE-2023-34232

    Snowflake NodeJS Driver vulnerable to Command Injection

    snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to b…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm
  • High 7.3
    CVE-2023-34231

    Snowflake Golang Driver vulnerable to Command Injection

    gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via single sign-on (SSO) browser URL authentication. In order to exploit the potential for command injection, an attack…

    snowflakedb gosnowflake github.com/snowflakedb/gosnowflake Go
  • High 7.3
    CVE-2023-30535

    Snowflake JDBC vulnerable to command injection via SSO URL authentication

    Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, public…

    snowflakedb snowflake-jdbc net.snowflake:snowflake-jdbc Maven