635 matches found
EUVD-2025-198932
Malicious code in @posthog/snowflake-export-plugin npm...
MAL-2025-190893 Malicious code in @posthog/snowflake-export-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64fb205150fc65f2334ab9ca1530bec4ef2d4dfea99ca328bfda4c70063ed793 The package @posthog/snowflake-export-plugin was found to contain malicious code. Source: google-open-source-security...
CVE-2025-3717
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is n...
CVE-2025-3717
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-3717
The CVE-2025-3717 issue affects Grafana Snowflake Datasource Plugin (versions 1.5.0 up to, but not including, 1.14.1). When Oauth passthrough is enabled and multiple users share the same datasource on a single Grafana instance, the wrong user identifier could be used, potentially causing unauthor...
PT-2025-46531
Name of the Vulnerable Software and Affected Versions Grafana Snowflake Datasource Plugin versions 1.5.0 through 1.14.0 Description The Grafana Snowflake Datasource Plugin contains a flaw where, with Oauth passthrough enabled, concurrent use by multiple users on a single Grafana instance can lead...
Grafana Snowflake Datasource Plugin 安全漏洞
Grafana Snowflake Datasource Plugin is an open source database connectivity plugin for Grafana. A security vulnerability exists in Grafana Snowflake Datasource Plugin version 1.5.0 through versions prior to 1.14.1, which stems from an incorrect use of a user identifier when Oauth passthrough is...
CVE-2025-3717
Grafana is an open-source platform for monitoring and observability. The Grafana-Snowflake-Datasource is a plugin allowing Grafana to visualize data from Snowflake Versions between 1.5.0 and 1.14.0 are vulnerable to a bug when Oauth passthrough is enabled, and multiple users are using the same...
Incorrect Permission Assignment for Critical Resource
Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ConfigManager.readconfig path in configmanager.py. An attacker can modify sensitive settings stored in the...
Security Bulletin: Sensitive Key Exposure in Snowflake JDBC Driver Logging (Versions 3.0.13 – 3.23.0), affects watsonx.data
Summary Snowflake, a platform for using artificial intelligence in the context of cloud computing, has a vulnerability in the Snowflake JDBC driver "Driver" in versions 3.0.13 through 3.23.0 of the driver. When the logging level was set to DEBUG, the Driver would log locally the client-side...
EUVD-2023-1189
Malicious code in bioql PyPI...
EUVD-2025-0209
Malicious code in bioql PyPI...
EUVD-2023-3228
Malicious code in bioql PyPI...
EUVD-2025-6404
Malicious code in bioql PyPI...
EUVD-2025-0123
Malicious code in bioql PyPI...
EUVD-2025-0144
Malicious code in bioql PyPI...