Maven/net.snowflake:snowflake-jdbc-thin CVE-2026-86597: medium 6.5, EPSS 0.09%
Snowflake drivers writes sensitive information to logs
Action: Upgrade net.snowflake:snowflake-jdbc-thin to 4.3.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.4 | - |
Fixed versions
| 4.3.4 |
Sources
- osv: GHSA-qqj6-54q6-cxv6#Maven/net.snowflake:snowflake-jdbc-thin
- https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6
- https://nvd.nist.gov/vuln/detail/CVE-2026-86597
- https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc-2026#version-434-sep-03-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/nodejs-2026#version-330-september-3-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/odbc-2026#version-3200-sep-3-2026
- https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-420-sep-3-2026
- https://github.com/snowflakedb/snowflake-connector-nodejs
- https://github.com/snowflakedb/snowflake-connector-python/releases/tag/v4.7.3
CVE-2026-86597 · published · modified · JSON