SQL Injection

apache-airflow-providers-snowflake is vulnerable to SQL Injection. The vulnerability is due to failure to sanitize special elements due to improper sanitation of table and stage parameters in the CopyFromExternalStageToSnowflakeOperator component...

CVE-2025-50213

Apache Airflow Providers Snowflake is vulnerable to a Special Element Injection (CWE-75) vulnerability in the CopyFromExternalStageToSnowflakeOperator component. The root cause is the failure to sanitize special elements within table and stage parameters, which can lead to SQL injection . An atta...

CVE-2025-50213: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Failure to Sanitize Special Elements into a Different Plane Special Element Injection vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and stage parameters were added...

PT-2025-26707

Name of the Vulnerable Software and Affected Versions: Apache Airflow Providers Snowflake versions prior to 6.4.0 Description: The issue is related to a Failure to Sanitize Special Elements into a Different Plane, also known as Special Element Injection vulnerability. This vulnerability affects t...