Skip to content
OpenAdvisories

Product · snowflakedb

libsnowflakeclient

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 3.3

    Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryptio…

  • Low 3.3

    Snowflake Connector for C/C++ retries malformed requests

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_…