Snowflake Connector vulnerabilities
9 known vulnerabilities in Snowflake Connector from Snowflake. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
snowflake-connector-nodejs: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggin
- 7.0 High severity
snowflake-connector-net: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads log
- 7.8 High severity
snowflake-connector-python: Deserialization of Untrusted Data
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP r
- 7.0 High severity
snowflake-connector-python: Improper Neutralization of Special Elements used in an SQL Command
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function
- 7.5 High severity
snowflake-connector-net: Improper Certificate Validation
The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing applications. Snowflake recently received a report about a vulnerability in the Snowflake Connector .NET where the checks against the Certificat
- 8.8 High severity
snowflake-connector-python: Improper Neutralization of Special Elements used in a Command
The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL authe
- 8.8 High severity
snowflake-connector-nodejs: Improper Neutralization of Special Elements used in a Command
snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to be
- 8.8 High severity
snowflake-connector-net: Improper Neutralization of Special Elements used in a Command
snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establishi
- 7.5 High severity
snowflake-connector-python: Inefficient Regular Expression Complexity
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method