gosnowflake vulnerabilities

2 known vulnerabilities in gosnowflake from Snowflakedb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  gosnowflake: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-46327Apr 28, 2025Snowflakedb

  gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration

• 8.8 High severity

  gosnowflake: Improper Neutralization of Special Elements used in a Command

  CVE-2023-34231Jun 8, 2023SnowflakedbEPSS 1.96%

  gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via single sign-on (SSO) browser URL authentication. In order to exploit the potential for command injection, an attacke