snowflakedb snowflake-connector-python vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest snowflakedb snowflake-connector-python vulnerabilities

CVE-2025-46328 — NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file (CVSS 7.0)
CVE-2025-46326 — Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file (CVSS 7.0)
CVE-2025-24795 — The Snowflake Connector for Python uses insecure cache files permissions (CVSS 5.5)
CVE-2025-24794 — The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache (CVSS 7.8)
CVE-2025-24793 — Snowflake Connector for Python has an SQL Injection in write_pandas (CVSS 7.0)
CVE-2025-24788 — Snowflake Connector for .NET has weak temporary files permissions (CVSS 5.5)
CVE-2025-24791 — snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions (CVSS 5.5)
CVE-2024-49750 — Snowflake Connector for Python has sensitive data in logs (CVSS 5.5)
CVE-2023-51662 — Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) (CVSS 7.5)
CVE-2023-34233 — Snowflake Python Connector vulnerable to Command Injection (CVSS 8.8)
CVE-2023-34232 — Snowflake NodeJS Driver vulnerable to Command Injection (CVSS 8.8)
CVE-2023-34230 — Snowflake Connector vulnerable to Command Injection (CVSS 8.8)
CVE-2022-42965 — Exponential ReDoS in snowflake-connector-python leads to denial of service (CVSS 7.5)