CVE-2026-3293 snowflakedb snowflake-jdbc JDBC URL SdkProxyRoutePlanner.java SdkProxyRoutePlanner redos

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts...

CVE-2026-3293

CVE-2026-3293 affects snowflake-bdb snowflake-jdbc up to 4.0.1, specifically the SdkProxyRoutePlanner (src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java) in the JDBC URL Handler. The vulnerability arises from manipulating the nonProxyHosts argument, which can cause ineffi...

PT-2026-22301

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts...

CVE-2026-3293: Inefficient Regular Expression Complexity

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts...

Snowflake JDBC Driver 安全漏洞

The Snowflake JDBC Driver is a driver developed by Snowflake Corporation. Versions of the Snowflake JDBC Driver prior to 4.0.1 contained a security vulnerability. This vulnerability stemmed from incorrect handling of the nonProxyHosts parameter in the function SdkProxyRoutePlanner within the...

airflow-clickhouse-plugin (1.2.0), airflow-tools (>=0.8.5, <=0.9.1) +2 more potentially affected by CVE-2026-24098 via apache-airflow (2.8.4)

apache-airflow PYPI version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-clickhouse-plugin 1.2.0 - airflow-tools =0.8.5, =0.0.4, =2.4.0rc1, =2.5.1 Source cves: CVE-2026-24098 Source advisory:...

CVE-2026-0994 vulnerabilities

Vulnerabilities for packages: azure-functions-python-worker, kserve, tritonserver-backend-vllm-cuda-12.9, label-studio, dbt-bigquery, kubeflow-pipelines, request-1276, pgadmin4-fips, py3-vllm-cuda-12.4, dbt-snowflake, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, localstack,...

GHSA-7GCM-G887-7QV7 vulnerabilities

Vulnerabilities for packages: azure-functions-python-worker, kserve, tritonserver-backend-vllm-cuda-12.9, label-studio, dbt-bigquery, kubeflow-pipelines, request-1276, pgadmin4-fips, py3-vllm-cuda-12.4, dbt-snowflake, kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, localstack,...

Ubuntu 22.04 LTS : Snowflake vulnerabilities (USN-7966-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7966-1 advisory. It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker...

Ubuntu: Security Advisory (USN-7966-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7966-1: Snowflake vulnerabilities

It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. CVE-2022-29189 It was discovered that Pion DTLS, vendored in Snowflake, did not...

net.snowflake:snowflake-jdbc-thin (4.0.0), org.apache.hadoop:hadoop-aws (3.4.2) +6 more potentially affected by CVE-2025-14763 via software.amazon.encryption.s3:amazon-s3-encryption-client-java (>=3.1.1, <=3.5.0)

software.amazon.encryption.s3:amazon-s3-encryption-client-java MAVEN version =3.1.1, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.2 Source cves: CVE-2025-14763 Source advisory: MEND:CVE-2025-14763...

Malicious code in elf-stats-sparkly-snowflake-139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904de23c28e88097f879716fa72600e798c5f59785c96ee87ce9f6741d91c286 The package elf-stats-sparkly-snowflake-139 was found to contain malicious code...

MAL-2025-192193 Malicious code in elf-stats-whimsical-snowflake-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32612e9bc1b7106587fec0bd0874c379147d662b77adee9afa38cadc90cc9289 The package elf-stats-whimsical-snowflake-250 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192156 Malicious code in elf-stats-sparkly-snowflake-139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904de23c28e88097f879716fa72600e798c5f59785c96ee87ce9f6741d91c286 The package elf-stats-sparkly-snowflake-139 was found to contain malicious code...

EUVD-2025-200796

Malicious code in elf-stats-sparkly-snowflake-139 npm...

Malicious code in elf-stats-whimsical-snowflake-250 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32612e9bc1b7106587fec0bd0874c379147d662b77adee9afa38cadc90cc9289 The package elf-stats-whimsical-snowflake-250 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-200759

Malicious code in elf-stats-whimsical-snowflake-250 npm...

Malicious code in @posthog/snowflake-export-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...

MAL-2025-190893 Malicious code in @posthog/snowflake-export-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...