Product by Snowflake
Snowflake Connector
13 known vulnerabilities in Snowflake Connector (Snowflake), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-34232 | Snowflake NodeJS Driver vulnerable to Command Injection | 7.3 | |
| High | CVE-2023-34233 | Snowflake Python Connector vulnerable to Command Injection | 7.3 | |
| High | CVE-2023-34230 | Snowflake Connector vulnerable to Command Injection | 7.3 | |
| High | CVE-2022-42965 | Exponential ReDoS in snowflake-connector-python leads to denial of service | 3.7 | |
| High | CVE-2025-24793 | Snowflake Connector for Python has an SQL Injection in write_pandas | 7.0 | |
| High | CVE-2025-24794 | The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache | 6.7 | |
| High | CVE-2023-51662 | Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) | 6.0 | |
| Medium | CVE-2024-49750 | Snowflake Connector for Python has sensitive data in logs | 5.5 | |
| Medium | CVE-2025-24788 | Snowflake Connector for .NET has weak temporary files permissions | 5.0 | |
| Medium | CVE-2025-24791 | snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions | 4.4 | |
| Medium | CVE-2025-24795 | The Snowflake Connector for Python uses insecure cache files permissions | 4.4 | |
| High | CVE-2025-46328 | Snowflakedb Snowflake-connector-nodejs: Time-of-check Time-of-use (TOCTOU) Race Condition | 3.3 | |
| High | CVE-2025-46326 | Snowflakedb Snowflake-connector-net: Time-of-check Time-of-use (TOCTOU) Race Condition | 3.3 |