10764 matches found
GHSA-6JGM-J7H2-2FQG Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
Issue Snowflake discovered and remediated a vulnerability in the Go Snowflake Driver “Driver”. When using the Easy Logging feature on Linux and macOS, the Driver didn’t correctly verify the permissions of the logging configuration file, potentially allowing an attacker with local access to...
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
Issue Snowflake discovered and remediated a vulnerability in the Go Snowflake Driver “Driver”. When using the Easy Logging feature on Linux and macOS, the Driver didn’t correctly verify the permissions of the logging configuration file, potentially allowing an attacker with local access to...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition when using the Easy Logging feature. A user with access to the config file can control it and expose log contents by directing the output to a readable location. Note: Only applications...
Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET “Connector”. When using the Easy Logging feature on Linux and macOS, the Connector didn’t correctly verify the permissions of the logging configuration file, potentially allowing an attacker with local...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition when using the Easy Logging feature. A user with access to the config file can control it and expose log contents by directing the output to a readable location. Note: Only applications...
GHSA-C82R-C9F7-F5MJ Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET “Connector”. When using the Easy Logging feature on Linux and macOS, the Connector didn’t correctly verify the permissions of the logging configuration file, potentially allowing an attacker with local...
CVE-2025-46614
In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File...
CVE-2025-46614
The CVE-2025-46614 issue affects the Snowflake ODBC Driver prior to 3.7.0, where certain code paths log the entire SQL query at INFO level, enabling potential exposure of sensitive information. This vulnerability has a low base score (CVSS 3.1: 3.3) with LOCAL, LOW impact on confidentiality and n...
PT-2025-18122 · Snowflake · Snowflake-Connector-Nodejs
Name of the Vulnerable Software and Affected Versions: snowflake-connector-nodejs versions 1.10.0 through 2.0.4 Description: The issue concerns a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the driver reads logging configuration from...
Snowflake Connector for .NET 安全漏洞
Snowflake Connector for .NET is a . A security vulnerability exists in Snowflake Connector for .NET versions prior to 2.1.2 through 4.4.1, which stems from a TOCTOU contention condition that could result in the logging configuration being overwritten...
PT-2025-18121
Name of the Vulnerable Software and Affected Versions gosnowflake versions 1.7.0 through 1.13.3 Description The issue is related to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the driver reads logging configuration from a...
PT-2025-18087 · Snowflake · Snowflake Jdbc Driver
Name of the Vulnerable Software and Affected Versions: Snowflake ODBC Driver versions prior to 3.7.0 Description: The issue concerns the logging of sensitive information. In certain code paths, the whole SQL query was logged at the INFO level. This could potentially lead to the exposure of...
CVE-2025-46614
In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File...
CVE-2025-46614
In Snowflake ODBC Driver before 3.7.0, in certain code paths, the Driver logged the whole SQL query at the INFO level, aka Insertion of Sensitive Information into a Log File...
Snowflake ODBC Driver 安全漏洞
Snowflake ODBC Driver is a powerful tool from Snowflake to connect to a live Snowflake data warehouse directly from any application that supports ODBC connectivity. A security vulnerability exists in Snowflake ODBC Driver versions prior to 3.7.0, which stems from logging sensitive information and...
CVE-2025-46328: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided...
CVE-2025-46327: Time-of-check Time-of-use (TOCTOU) Race Condition
gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...
CVE-2025-46326: Time-of-check Time-of-use (TOCTOU) Race Condition
snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided...
