SQL Injection

apache-airflow-providers-snowflake is vulnerable to SQL Injection. The vulnerability is due to failure to sanitize special elements due to improper sanitation of table and stage parameters in the CopyFromExternalStageToSnowflakeOperator component...

CVE-2025-50213

CVE-2025-50213 concerns Apache Airflow Providers Snowflake. The issue is a Special Element Injection caused by failure to sanitize special elements, affecting the CopyFromExternalStageToSnowflakeOperator and allowing SQL injection. Affected product: Apache Airflow Providers Snowflake prior to ver...

PT-2025-26707

Name of the Vulnerable Software and Affected Versions: Apache Airflow Providers Snowflake versions prior to 6.4.0 Description: The issue is related to a Failure to Sanitize Special Elements into a Different Plane, also known as Special Element Injection vulnerability. This vulnerability affects t...