PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
snow Unauthenticated Nonce Increment in snow Unknown 2 years ago 1 day ago
apache-airflow-providers-snowflake No summary available Medium Risk 6.3 15 days ago 6 days ago
snowflake-sdk Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
snowflake-connector-python Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
net.snowflake:snowflake-jdbc Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
net.snowflake:snowflake-jdbc-fips Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
net.snowflake:snowflake-jdbc-thin Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
github.com/snowflakedb/gosnowflake Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
github.com/snowflakedb/gosnowflake/v2 Snowflake drivers writes sensitive information to logs Medium Risk 6.5 8 days ago 6 days ago
github.com/snowflakedb/gosnowflake Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake Unknown 6 days ago 6 days ago
github.com/snowflakedb/gosnowflake/v2 Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake Unknown 6 days ago 6 days ago
snowflake-connector-python Snowflake Connector for Python improperly verifies TLS hostnames Critical 9.5 3 months ago 1 month ago
snowflake-sqlalchemy Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities High Risk 8.3 3 months ago 1 month ago
snowflake-connector-python Snowflake Connector for Python improperly verifies TLS hostnames Unknown 1 month ago 1 month ago
snowflake-sqlalchemy Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities High Risk 8.3 1 month ago 1 month ago
dagster-snowflake Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations High Risk 8.3 5 months ago 1 month ago
dagster-snowflake-polars Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations High Risk 8.3 5 months ago 1 month ago
github.com/snowflakedb/gosnowflake Go Snowflake Driver has race condition when checking access to Easy Logging configuration file Low Risk 3.3 1 year ago 1 month ago
net.snowflake:snowflake-jdbc Snowflake JDBC allows an untrusted search path on Windows High Risk 7.8 1 year ago 1 month ago
aws-sdk-snowball AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 9 months ago 1 month ago
aws-sdk-snowdevicemanagement AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 9 months ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache Medium Risk 6.7 1 year ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to insecure cache files permissions Medium Risk 4.4 1 year ago 1 month ago
snowflake-connector-python snowflake-connector-python vulnerable to SQL Injection in write_pandas High Risk 7.0 1 year ago 1 month ago
net.snowflake:snowflake-jdbc Snowflake JDBC uses insecure temporary credential cache file permissions Medium Risk 4.4 1 year ago 1 month ago
snowflake-connector-python The Snowflake Connector for Python stores sensitive data in logs Medium Risk 5.5 1 year ago 1 month ago
net.snowflake:snowflake-jdbc Snowflake JDBC Security Advisory Medium Risk 5.9 1 year ago 1 month ago
snowflake.data Snowflake Connector .Net Command Injection High Risk 7.3 3 years ago 1 month ago
github.com/snowflakedb/gosnowflake Snowflake Golang Driver vulnerable to Command Injection High Risk 7.3 3 years ago 1 month ago
net.snowflake:snowflake-jdbc Snowflake JDBC vulnerable to command injection via SSO URL authentication High Risk 7.3 3 years ago 1 month ago
net.snowflake:snowflake-jdbc Snowflake JDBC Driver client-side encryption key in DEBUG logs Low Risk 3.3 1 year ago 1 month ago
elf-stats-starlit-snowglobe-806 Malicious code in elf-stats-starlit-snowglobe-806 (npm) Unknown 3 months ago 1 month ago
elf-stats-storybook-snowman-513 Malicious code in elf-stats-storybook-snowman-513 (npm) Unknown 3 months ago 1 month ago
elf-stats-merry-snowflake-893 Malicious code in elf-stats-merry-snowflake-893 (npm) Unknown 3 months ago 1 month ago
elf-stats-snowdusted-bauble-546 Malicious code in elf-stats-snowdusted-bauble-546 (npm) Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export High Risk 7.6 6 months ago 1 month ago
github.com/lin-snow/ech0 Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation Medium Risk 5.3 5 months ago 1 month ago
github.com/lin-snow/Ech0 Ech0 comment model's Email field returned on public /api/comments endpoints Medium Risk 5.3 5 months ago 1 month ago
github.com/lin-snow/ech0 Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 Ech0's Unauthenticated Like Endpoint Enables Arbitrary Engagement Metric Inflation in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 comment model's Email field returned on public /api/comments endpoints in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo High Risk 7.7 5 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/Ech0 Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers Medium Risk 4.8 5 months ago 1 month ago
github.com/lin-snow/ech0 ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI High Risk 7.4 5 months ago 1 month ago
github.com/lin-snow/ech0 Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 Comment Panel Endpoints Missing RequireScopes Middleware — Scoped Access Token Bypass Medium Risk 5.5 6 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 Scope Bypass: profile:read Access Token Can Change Admin Password and Escalate to Unrestricted Session Medium Risk 6.5 6 months ago 1 month ago
github.com/lin-snow/ech0 Ech0 Comment Panel Endpoints Missing RequireScopes Middleware — Scoped Access Token Bypass in github.com/lin-snow/ech0 Unknown 3 months ago 1 month ago
Data courtesy of OSV.dev
Page 1