Apache-airflow-providers-snowflake (Apache) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 174 known versions, newest CVE from 2026-09-29. Vendor: Apache.

CVEs of Apache-airflow-providers-snowflake

• CVE-2026-81930 - CVSS 6.3 (medium), 2026-09-29: Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API…
• CVE-2025-50213 - CVSS 9.8 (critical), 2025-06-24: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue…