Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

net.snowflake:snowflake-jdbc-thin

5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high, 3 medium
Registry
Maven Central

Advisories 5

  • CVE-2026-114456Medium 6.5

    Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

    Affected: from 3.2.3, fixed in 4.4.0.

  • Workload identity attestation generated before login host validation in Snowflake drivers

    Affected: from 3.24.0, fixed in 4.3.4.

  • CVE-2026-86597Medium 6.5

    Sensitive information written to logs by Snowflake drivers

    Affected: fixed in 4.3.4; fixed in 4.3.4.

  • CVE-2026-85528Medium 5.3

    Snowflake JDBC Driver auto-configuration account validation permits credential redirection

    Affected: from 4.2.0, fixed in 4.3.4.

  • Improper OCSP response validation in Snowflake drivers

    Affected: fixed in 4.3.4.