NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file
- Severity:
- Low
Description
Snowflake discovered and remediated a vulnerability in the NodeJS Driver for Snowflake (“Driver”).
Recommendation
Update the snowflake-sdk package to the latest compatible version. Followings are version details:
- Affected version(s): >= 1.10.0, <= 2.0.3
- Patched version(s): 2.0.4
References
Related Issues
- snowflake-sdk may incorrectly validate temporary credential cache file permissions - CVE-2025-24791
- crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard - CVE-2023-46233
- crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard - CVE-2023-46133
- Snowflake NodeJS Driver vulnerable to Command Injection - CVE-2023-34232
- Tags:
- npm
- snowflake-sdk
Anything's wrong? Let us know Last updated on April 29, 2025