604 matches found
MAL-2025-192193 Malicious code in elf-stats-whimsical-snowflake-250 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32612e9bc1b7106587fec0bd0874c379147d662b77adee9afa38cadc90cc9289 The package elf-stats-whimsical-snowflake-250 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-200759
Malicious code in elf-stats-whimsical-snowflake-250 npm...
MAL-2025-192156 Malicious code in elf-stats-sparkly-snowflake-139 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904de23c28e88097f879716fa72600e798c5f59785c96ee87ce9f6741d91c286 The package elf-stats-sparkly-snowflake-139 was found to contain malicious code...
Malicious code in @posthog/snowflake-export-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198932
Malicious code in @posthog/snowflake-export-plugin npm...
MAL-2025-190893 Malicious code in @posthog/snowflake-export-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...
CVE-2025-3717
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is n...
CVE-2025-3717
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-3717
The CVE-2025-3717 issue affects Grafana Snowflake Datasource Plugin (versions 1.5.0 up to, but not including, 1.14.1). When Oauth passthrough is enabled and multiple users share the same datasource on a single Grafana instance, the wrong user identifier could be used, potentially causing unauthor...
CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
PT-2025-46531
Name of the Vulnerable Software and Affected Versions Grafana Snowflake Datasource Plugin versions 1.5.0 through 1.14.0 Description The Grafana Snowflake Datasource Plugin contains a flaw where, with Oauth passthrough enabled, concurrent use by multiple users on a single Grafana instance can lead...
Grafana Snowflake Datasource Plugin 安全漏洞
Grafana Snowflake Datasource Plugin is an open source database connectivity plugin for Grafana. A security vulnerability exists in Grafana Snowflake Datasource Plugin version 1.5.0 through versions prior to 1.14.1, which stems from an incorrect use of a user identifier when Oauth passthrough is...
CVE-2025-3717
Grafana is an open-source platform for monitoring and observability. The Grafana-Snowflake-Datasource is a plugin allowing Grafana to visualize data from Snowflake Versions between 1.5.0 and 1.14.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are using the same...
Incorrect Permission Assignment for Critical Resource
Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ConfigManager.readconfig path in configmanager.py. An attacker can modify sensitive settings stored in the...
Security Bulletin: Sensitive Key Exposure in Snowflake JDBC Driver Logging (Versions 3.0.13 – 3.23.0), affects watsonx.data
Summary Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver "Driver" in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would log locally the client-side...
EUVD-2023-1814
Malicious code in bioql PyPI...
EUVD-2023-1189
Malicious code in bioql PyPI...