Search for packages
| purl | pkg:maven/net.snowflake/snowflake-jdbc@3.20.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gx6c-pv62-9mcf
Aliases: CVE-2026-3293 |
Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner A weakness has been identified in Snowflake JDBC Driver … | There are no reported fixed by versions. |
|
CVE-2025-24790
Aliases: GHSA-33g6-495w-v8j2 |
Snowflake JDBC uses insecure temporary credential cache file permissions ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake … |
Vulnerable Vulnerable |
|
CVE-2025-24789
Aliases: GHSA-7hpq-3g6w-pvhf |
Snowflake JDBC allows an untrusted search path on Windows ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake … |
Vulnerable Vulnerable |
|
GHSA-q298-375f-5q63
Aliases: CVE-2025-27496 |
Snowflake JDBC Driver client-side encryption key in DEBUG logs ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake … |
Vulnerable Vulnerable |
|
GHSA-7hpq-3g6w-pvhf
Aliases: CVE-2025-24789 |
Snowflake JDBC allows an untrusted search path on Windows ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake … |
Vulnerable Vulnerable |
|
GHSA-33g6-495w-v8j2
Aliases: CVE-2025-24790 |
Snowflake JDBC uses insecure temporary credential cache file permissions ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake … |
Vulnerable Vulnerable |
|
GHSA-qqj6-54q6-cxv6
Aliases: CVE-2026-86597 |
Snowflake drivers writes sensitive information to logs Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-f686-hw9c-xw9c
|
Snowflake JDBC Security Advisory ### Impacted Products Snowflake JDBC driver versions >= 3.2.6 & <= 3.19.1 are affected. ### Introduction … |
CVE-2024-43382
|