Known Vulnerabilities for products from Snowflake
Listed below are 19 of the newest known vulnerabilities associated with the vendor "Snowflake".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58375 json | Not Provided | 2026-06-30 | 2026-07-01 | |
| CVE-2026-46427 json | Not Provided | 2026-05-27 | 2026-05-28 | |
| CVE-2026-42237 json | Not Provided | 2026-05-04 | 2026-05-04 | |
| CVE-2026-41490 json | Not Provided | 2026-05-07 | 2026-05-07 | |
| CVE-2026-33682 json | Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 run... | Not Provided | 2026-03-26 | 2026-04-01 |
| CVE-2026-28381 json | Not Provided | 2026-06-22 | 2026-06-24 | |
| CVE-2026-15067 json | Not Provided | 2026-07-08 | 2026-07-08 | |
| CVE-2026-15062 json | Not Provided | 2026-07-08 | 2026-07-08 | |
| CVE-2026-13752 json | Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker c... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13751 json | Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed server-side request forgery.... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13750 json | Insertion of sensitive information into log files in Snowflake CLI versions prior to 3.19 allowed plaintext credentials to be... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13749 json | Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowe... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13748 json | Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to ... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13746 json | Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A u... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-13744 json | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL executi... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-10804 json | A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtim... | Not Provided | 2026-06-04 | 2026-06-10 |
| CVE-2026-3293 json | A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of th... | Not Provided | 2026-02-27 | 2026-04-29 |
| CVE-2023-51662 json | 7.5 - HIGH | 2023-12-22 | 2024-01-03 | |
| CVE-2023-34233 json | The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and... | 8.8 - HIGH | 2023-06-08 | 2023-06-16 |
| CVE-2023-34232 json | snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browse... | 8.8 - HIGH | 2023-06-08 | 2023-06-20 |