Snowflake Node.js Driver vulnerabilities

2 known vulnerabilities in Snowflake Node.js Driver from Snowflake. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Snowflake Connector for Python: Unintended Proxy or Intermediary

  CVE-2026-86600Sep 8, 2026Snowflake

  In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configur

• 7.4 High severity

  Snowflake Connector for Python: Improper Certificate Validation

  CVE-2026-85525Sep 4, 2026Snowflake

  Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification fa