- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 11 · 4 high, 6 medium, 1 low
- Dependents
- 19
- Registry
- Maven Central
Advisories 11
- CVE-2026-114456Medium 6.5
Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers
Affected: from 3.2.3, fixed in 4.4.0.
- CVE-2026-86600High 8.2
Workload identity attestation generated before login host validation in Snowflake drivers
Affected: from 3.24.0, fixed in 4.3.4.
- CVE-2026-86597Medium 6.5
Sensitive information written to logs by Snowflake drivers
Affected: fixed in 4.3.4; fixed in 4.3.4.
- CVE-2026-85528Medium 5.3
Snowflake JDBC Driver auto-configuration account validation permits credential redirection
Affected: from 4.2.0, fixed in 4.3.4.
- CVE-2026-85525High 7.4
Improper OCSP response validation in Snowflake drivers
Affected: fixed in 4.3.4.
- CVE-2026-3293Medium 4.8
snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos
Affected: through 4.0.1.
- CVE-2025-27496Low 3.3
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Affected: from 3.0.13, fixed in 3.23.1.
- CVE-2025-24790Medium 4.4
Snowflake JDBC uses insecure temporary credential cache file permissions
Affected: from 3.6.8, fixed in 3.22.0.
- CVE-2025-24789High 7.8
Snowflake JDBC allows an untrusted search path on Windows
Affected: from 3.2.3, fixed in 3.22.0.
- CVE-2024-43382Medium 5.9
Snowflake JDBC driver versions >= 3.2.6 and <= 3.19.1 have an Incorrect Security Setting that can result in data being uploaded to an…
Affected: from 3.2.6, fixed in 3.20.0.
- CVE-2023-30535High 7.3
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Affected: fixed in 3.13.29.