Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/net.snowflake/snowflake-jdbc@3.6.14
purl pkg:maven/net.snowflake/snowflake-jdbc@3.6.14
Next non-vulnerable version 4.3.4
Latest non-vulnerable version 4.3.4
Risk score 3.5
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
GHSA-4g3j-c4wg-6j7x
Aliases:
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication Snowflake JDBC driver is vulnerable to command injection vulnerability via …
3.13.29
Vulnerable
GHSA-gx6c-pv62-9mcf
Aliases:
CVE-2026-3293
Snowflake JDBC Driver is Vulnerable to Uncontrolled Resource Consumption through SdkProxyRoutePlanner A weakness has been identified in Snowflake JDBC Driver … There are no reported fixed by versions.
CVE-2025-24790
Aliases:
GHSA-33g6-495w-v8j2
Snowflake JDBC uses insecure temporary credential cache file permissions ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake …
3.22.0
Vulnerable
3.22.0
Vulnerable
CVE-2025-24789
Aliases:
GHSA-7hpq-3g6w-pvhf
Snowflake JDBC allows an untrusted search path on Windows ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake …
3.22.0
Vulnerable
3.22.0
Vulnerable
GHSA-q298-375f-5q63
Aliases:
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake …
3.23.1
Vulnerable
3.23.1
Vulnerable
GHSA-7hpq-3g6w-pvhf
Aliases:
CVE-2025-24789
Snowflake JDBC allows an untrusted search path on Windows ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake …
3.22.0
Vulnerable
3.22.0
Vulnerable
GHSA-33g6-495w-v8j2
Aliases:
CVE-2025-24790
Snowflake JDBC uses insecure temporary credential cache file permissions ### Issue Snowflake discovered and remediated a vulnerability in the Snowflake …
3.22.0
Vulnerable
3.22.0
Vulnerable
GHSA-f686-hw9c-xw9c
Aliases:
CVE-2024-43382
Snowflake JDBC Security Advisory ### Impacted Products Snowflake JDBC driver versions >= 3.2.6 & <= 3.19.1 are affected. ### Introduction …
3.20.0
Vulnerable
3.20.0
Vulnerable
GHSA-qqj6-54q6-cxv6
Aliases:
CVE-2026-86597
Snowflake drivers writes sensitive information to logs Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, …
4.3.4
Not vulnerable
This package is not known to fix any advisories.