Package Health/net.snowflake:snowflake-jdbc

snowflake-jdbc

Snowflake JDBC Driver

Latest 4.3.4net.snowflake

Maven

92%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Dangerous workflows

One of 11 workflows uses pull_request_target, which warrants review because that trigger can increase privilege exposure. However, no untrusted checkouts or script-injection patterns were detected, limiting the concern to workflow hygiene.

Token permissions

Five workflows lack top-level permissions declarations and two declare top-level write permissions. Although four workflows have read-only permissions and no exploit is shown, explicit least-privilege declarations would improve CI security hygiene.

Vulnerabilities

Title	Versions	Severity
CVE-2026-3293 net.snowflake:snowflake-jdbc is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 4.0.1.	0.0.0 - 4.0.1	Low
AIKIDO-2026-10121 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. snowflake-jdbc is vulnerable to Insertion of Sensitive Information into Log File in versions 0.0.1 - 3.28.0.	0.0.1 - 3.28.0	Low
CVE-2025-27496 net.snowflake:snowflake-jdbc is vulnerable to Insertion of Sensitive Information into Log File in versions 3.0.13 - 3.23.0.	3.0.13 - 3.23.0	Low
CVE-2025-24790 net.snowflake:snowflake-jdbc is vulnerable to Incorrect Default Permissions in versions 3.6.8 - 3.21.0.	3.6.8 - 3.21.0	Medium
CVE-2025-24789 net.snowflake:snowflake-jdbc is vulnerable to Untrusted Search Path in versions 3.2.3 - 3.21.0.	3.2.3 - 3.21.0	High