Snowflake Node.js Driver (Snowflake) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-08. Vendor: Snowflake.

CVEs of Snowflake Node.js Driver

• CVE-2026-86600 - CVSS 8.2 (high), 2026-09-08: In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without…
• CVE-2026-86597 - CVSS 6.5 (medium), 2026-09-08: Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens,…
• CVE-2026-85525 - CVSS 7.4 (high), 2026-09-04: Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because…