npm/snowflake-sdk CVE-2025-24791: medium 4.4, EPSS 0.15%
snowflake-sdk may incorrectly validate temporary credential cache file permissions
Action: Upgrade snowflake-sdk to 2.0.2 or later.
npm i snowflake-sdk@2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.12.0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-xfhv-wqj6-rx99
- https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-xfhv-wqj6-rx99
- https://nvd.nist.gov/vuln/detail/CVE-2025-24791
- https://github.com/snowflakedb/snowflake-connector-nodejs/commit/89731b3a4d61a75b721d13d4e47a7a3712ffa45f
- https://github.com/snowflakedb/snowflake-connector-nodejs
CVE-2025-24791 · published · modified · JSON