CVE Browser

Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Workload identity attestation generated before login host validation in Snowflake drivers

Sensitive information written to logs by Snowflake drivers

Snowflake JDBC Driver auto-configuration account validation permits credential redirection

Improper OCSP response validation in Snowflake drivers

Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation

Multiple Security Vulnerabilities in Snowflake libsnowflakeclient

Improper TLS Hostname Verification in Snowflake Connector for Python

Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Input Validation Vulnerabilities in Snowflake Spark Connector

Multiple Security Vulnerabilities in Terraform Provider for Snowflake Could Allow Privilege Escalation and Unauthorized Snowflake Account Takeover

SQL Injection in Snowflake Snowpark Python SDK

Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands

Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load

Snowflake CLI Sensitive Credential Exposure Through Debug Logging

Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection

Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction

Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters

Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input

Streamlit Palette hashing.py weak hash

Improper Command Detection Logic Allows RCE in Cortex Code Command-Line Interface

Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos

Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs

Snowflake Connector for C/C++ retries malformed requests