Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Snowflake Connector for Python, Snowflake Go Driver and 6 more products 2.2.0, 3.20.0 and 4 more versions Clear all filters
TI-2026-59237 CVE-2026-86600 · GHSA-fhj9-24fm-m53p

Workload identity attestation generated before login host validation in Snowflake drivers

Priority LOW 38

In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00511 Published 2026-09-08 Fixed in 4.7.3, 2.2.0 +6 CWE-441
TI-2026-59236 CVE-2026-86597 · GHSA-5cwm-p7pj-gqp2 · GHSA-qqj6-54q6-cxv6

Sensitive information written to logs by Snowflake drivers

Priority LOW 27

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00089 Published 2026-09-08 Fixed in 4.7.3, 2.2.0 +4 CWE-532