Advisories · Technology
Snowflake CLI.
Every CVE that names Snowflake CLI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings
- Snowflake CLI
- SQL injection
- CVSS 6.0 Medium
Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands
- Snowflake CLI
- SQL injection
- CVSS 4.1 Medium
Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
- Snowflake CLI
- Server-side request forgery (SSRF)
- CWE-829
- CVSS 5.5 Medium
Snowflake CLI Sensitive Credential Exposure Through Debug Logging
- Snowflake CLI
- Information disclosure
- CVSS 8.8 High
Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection
- Snowflake CLI
- Code injection
- CVSS 6.3 Medium
Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction
- Snowflake CLI
- Path traversal
- CWE-61
- CVSS 3.6 Low
Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters
- Snowflake CLI
- SQL injection
- CVSS 8.3 High
Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input
- Snowflake CLI
- SQL injection