Snowflake Connector For C/c++ vulnerabilities

2 CVEs affecting Snowflake Connector For C/c++, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46330, published 2025-04-29.

More from Snowflake.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-46330, published 2025-04-29. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to…
• CVE-2025-46329, published 2025-04-29. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to…