Snowflake Gosnowflake vulnerabilities

2 CVEs affecting Snowflake Gosnowflake, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46327, published 2025-04-28.

More from Snowflake.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-34231, published 2023-06-08. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via single sign-on (SSO) browser URL authentication. In…
• CVE-2025-46327, published 2025-04-28. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging…