Skip to content
OpenAdvisories

Vendor

snowflakedb

23 known vulnerabilities.

Products

snowflake-connector-python 5 snowflake-jdbc 5 snowflake-connector-net 4 snowflake-connector-nodejs 3 gosnowflake 2 libsnowflakeclient 2 snowflake-hive-metastore-connector 1 pdo_snowflake 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-3293

    snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos

    A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manip…

    snowflakedb snowflake-jdbc net.snowflake:snowflake-jdbc Maven
  • Low 3.3
    CVE-2025-46329

    Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryptio…

    snowflakedb libsnowflakeclient
  • Low 3.3
    CVE-2025-46330

    Snowflake Connector for C/C++ retries malformed requests

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_…

    snowflakedb libsnowflakeclient
  • Low 3.3
    CVE-2025-46328

    NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

    snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggi…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm
  • Low 3.3
    CVE-2025-46327

    Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

    gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration…

    snowflakedb gosnowflake telegraf grafana-alloy Azure Linux Wolfi Go
  • Low 3.3
    CVE-2025-46326

    Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file

    snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads lo…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • Low 3.3
    CVE-2025-27496

    Snowflake JDBC Driver client-side encryption key in DEBUG logs

    Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver ("Driver") in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would l…

    snowflakedb snowflake-jdbc trino trino-plugin-opensearch Wolfi Maven