snowflake-connector-nodejs vulnerabilities

2 known vulnerabilities in snowflake-connector-nodejs from Snowflakedb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  snowflake-connector-nodejs: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-46328Apr 28, 2025Snowflakedb

  snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads loggin

• 8.8 High severity

  snowflake-connector-nodejs: Improper Neutralization of Special Elements used in a Command

  CVE-2023-34232Jun 8, 2023SnowflakedbEPSS 1.9%

  snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to be