Log in Start free

snowflakedb

Products

ProductCVEsExploitedLatest
snowflake-jdbc5–Feb 27, 2026
snowflake-connector-python5–Jan 29, 2025
snowflake-connector-net4–Apr 28, 2025
snowflake-connector-nodejs3–Apr 28, 2025
gosnowflake2–Apr 28, 2025
libsnowflakeclient2–Apr 29, 2025
pdo_snowflake1–Jan 29, 2025
snowflake-hive-metastore-connector1–Mar 15, 2024

Exploited and recent CVEs

  • CVE-2026-3293 Low 3.3 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos 0.3%
  • CVE-2025-46329 Low 3.3 Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs 0.1%
  • CVE-2025-46330 Low 3.3 Snowflake Connector for C/C++ retries malformed requests 0.2%
  • CVE-2025-46328 Low 3.3 NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file 0.2%
  • CVE-2025-46327 Low 3.3 Go Snowflake Driver has race condition when checking access to Easy Logging configuration file 0.1%
  • CVE-2025-46326 Low 3.3 Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file 0.2%
  • CVE-2025-27496 Low 3.3 Snowflake JDBC Driver client-side encryption key in DEBUG logs 0.1%
  • CVE-2025-24795 Medium 4.4 The Snowflake Connector for Python uses insecure cache files permissions 0.1%
  • CVE-2025-24794 Medium 6.7 The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache 0.2%
  • CVE-2025-24793 High 7.0 Snowflake Connector for Python has an SQL Injection in write_pandas 0.3%
  • CVE-2025-24788 Medium 5.0 Snowflake Connector for .NET has weak temporary files permissions 0.1%
  • CVE-2025-24790 Medium 4.4 Snowflake JDBC uses insecure temporary credential cache file permissions 0.2%
  • CVE-2025-24789 High 7.8 Snowflake JDBC allows an untrusted search path on Windows 0.3%
  • CVE-2025-24791 Medium 4.4 snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions 0.1%
  • CVE-2025-24792 Medium 4.4 Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error 0.1%
  • CVE-2024-49750 Medium 5.5 Snowflake Connector for Python has sensitive data in logs 0.2%
  • CVE-2024-28851 Medium 4.0 Elevation of privilege in Snowflake Hive MetaStore Connector Helper script 0.3%
  • CVE-2023-51662 Medium 6.0 Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) 0.3%
  • CVE-2023-34230 High 7.3 Snowflake Connector vulnerable to Command Injection 1.4%
  • CVE-2023-34233 High 7.3 Snowflake Python Connector vulnerable to Command Injection 1.8%
  • CVE-2023-34232 High 7.3 Snowflake NodeJS Driver vulnerable to Command Injection 1.9%
  • CVE-2023-34231 High 7.3 Snowflake Golang Driver vulnerable to Command Injection 2.0%
  • CVE-2023-30535 High 7.3 Snowflake JDBC vulnerable to command injection via SSO URL authentication 1.7%