data_pipeline_poc

📦 Catalogue Produit Unifié — Data Pipeline 🎯 Objectif Ce...

Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

...

Security Bulletin: Vulnerability in snowflake-jdbc affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary IBM watsonx Orchestrate with watsonx Assistant Cartridge contains a vulnerable version of snowflake-jdbc Vulnerability Details CVEID:CVE-2025-24789 DESCRIPTION: Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake...

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

A widespread data theft campaign has allowed hackers to breach sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence AI chat agent. The activity, assessed to be opportunistic in nature, has been attributed to a threat actor tracked...

Malicious code in snowflake-quince-z0se (npm)

The package snowflake-quince-z0se was found to contain malicious code...

Malicious code in snowflake-quinoa-scad (npm)

The package snowflake-quinoa-scad was found to contain malicious code...

Malicious code in teak-snowflake-a2df (npm)

The package teak-snowflake-a2df was found to contain malicious code...

MAL-2025-33562 Malicious code in snowflake-ferry-l8fi (npm)

The package snowflake-ferry-l8fi was found to contain malicious code...

MAL-2025-33565 Malicious code in snowflake-quince-z0se (npm)

The package snowflake-quince-z0se was found to contain malicious code...

MAL-2025-37327 Malicious code in turnip-snowflake-p9or (npm)

The package turnip-snowflake-p9or was found to contain malicious code...

MAL-2025-33564 Malicious code in snowflake-mike-df6q (npm)

The package snowflake-mike-df6q was found to contain malicious code...

MAL-2025-33566 Malicious code in snowflake-quinoa-scad (npm)

The package snowflake-quinoa-scad was found to contain malicious code...

Malicious code in turnip-snowflake-p9or (npm)

The package turnip-snowflake-p9or was found to contain malicious code...

Malicious code in snowflake-mike-df6q (npm)

The package snowflake-mike-df6q was found to contain malicious code...

Malicious code in snowflake-heliosphere-k5is (npm)

The package snowflake-heliosphere-k5is was found to contain malicious code...

MAL-2025-34621 Malicious code in teak-snowflake-a2df (npm)

The package teak-snowflake-a2df was found to contain malicious code...

MAL-2025-33563 Malicious code in snowflake-heliosphere-k5is (npm)

The package snowflake-heliosphere-k5is was found to contain malicious code...

The vulnerability of the CopyFromExternalStageToSnowflakeOperator() function in the Apache Airflow data integration with cloud platform providers Snowflake allows a hacker to execute arbitrary code.

The vulnerability of the CopyFromExternalStageToSnowflakeOperator function in the Apache Airflow integration with cloud data platforms involves improper elimination of special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SQL Injection

apache-airflow-providers-snowflake is vulnerable to SQL Injection. The vulnerability is due to failure to sanitize special elements due to improper sanitation of table and stage parameters in the CopyFromExternalStageToSnowflakeOperator component...

Apache Airflow Providers Snowflake package allows for Special Element Injection via CopyFromExternalStageToSnowflakeOperator

Failure to Sanitize Special Elements into a Different Plane Special Element Injection vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and stage parameters were added...