Vendor
Snowflakedb
23 known vulnerabilities in products by Snowflakedb, 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-34231 | Snowflake Golang Driver vulnerable to Command Injection | 7.3 | |
| High | CVE-2023-34232 | Snowflake NodeJS Driver vulnerable to Command Injection | 7.3 | |
| High | CVE-2023-34233 | Snowflake Python Connector vulnerable to Command Injection | 7.3 | |
| High | CVE-2023-30535 | Snowflake JDBC vulnerable to command injection via SSO URL authentication | 7.3 | |
| High | CVE-2023-34230 | Snowflake Connector vulnerable to Command Injection | 7.3 | |
| High | CVE-2025-24789 | Snowflake JDBC allows an untrusted search path on Windows | 7.8 | |
| High | CVE-2025-24793 | Snowflake Connector for Python has an SQL Injection in write_pandas | 7.0 | |
| High | CVE-2025-24794 | The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache | 6.7 | |
| Medium | CVE-2026-3293 | snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos | 3.3 | |
| High | CVE-2023-51662 | Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) | 6.0 | |
| Medium | CVE-2024-49750 | Snowflake Connector for Python has sensitive data in logs | 5.5 | |
| Medium | CVE-2025-24788 | Snowflake Connector for .NET has weak temporary files permissions | 5.0 | |
| Medium | CVE-2025-24790 | Snowflake JDBC uses insecure temporary credential cache file permissions | 4.4 | |
| Medium | CVE-2025-24791 | snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions | 4.4 | |
| Medium | CVE-2025-24795 | The Snowflake Connector for Python uses insecure cache files permissions | 4.4 | |
| Medium | CVE-2025-24792 | Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error | 4.4 | |
| High | CVE-2024-28851 | Elevation of privilege in Snowflake Hive MetaStore Connector Helper script | 4.0 | |
| High | CVE-2025-46328 | Snowflakedb Snowflake-connector-nodejs: Time-of-check Time-of-use (TOCTOU) Race Condition | 3.3 | |
| Low | CVE-2025-46330 | Snowflake Connector for C/C++ retries malformed requests | 3.3 | |
| High | CVE-2025-46326 | Snowflakedb Snowflake-connector-net: Time-of-check Time-of-use (TOCTOU) Race Condition | 3.3 | |
| High | CVE-2025-46327 | Go Snowflake Driver has race condition when checking access to Easy Logging configuration file | 3.3 | |
| Low | CVE-2025-46329 | Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs | 3.3 | |
| Low | CVE-2025-27496 | Snowflake JDBC Driver client-side encryption key in DEBUG logs | 3.3 |
Products
| Snowflake-connector-python | 5 | 0 |
| Snowflake-jdbc | 5 | 0 |
| Snowflake-connector-net | 4 | 0 |
| Snowflake-connector-nodejs | 3 | 0 |