Skip to main content
cve.nowby Sazabi
← npm
npmPackage

snowflake-sdk

7 known vulnerabilities (3 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 3 high, 3 medium, 1 low
Registry
npm

Advisories 7

  • CVE-2026-114456Medium 6.5

    Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

    Affected: from 1.6.0, fixed in 3.4.0.

  • Workload identity attestation generated before login host validation in Snowflake drivers

    Affected: from 2.1.1, fixed in 3.3.0.

  • CVE-2026-86597Medium 6.5

    Sensitive information written to logs by Snowflake drivers

    Affected: fixed in 3.3.0; fixed in 3.3.0.

  • Improper OCSP response validation in Snowflake drivers

    Affected: fixed in 3.3.0.

  • NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file

    Affected: from 1.10.0, fixed in 2.0.4.

  • CVE-2025-24791Medium 4.4

    snowflake-connector-nodejs has incorrect validation of temporary credential cache file permissions

    Affected: from 1.12.0, fixed in 2.0.2.

  • Snowflake NodeJS Driver vulnerable to Command Injection

    Affected: fixed in 1.6.21.