CVE-2023-34231

Go/github.com/snowflakedb/gosnowflake CVE-2023-34231: high 7.3, EPSS 1.96%

Snowflake Golang Driver vulnerable to Command Injection

Action: Upgrade github.com/snowflakedb/gosnowflake to 1.6.19 or later.

go get github.com/snowflakedb/gosnowflake@v1.6.19

Affected

Fixed versions

Sources

• osv: GHSA-fwv2-65wh-2w8c
• https://github.com/snowflakedb/gosnowflake/security/advisories/GHSA-fwv2-65wh-2w8c
• https://nvd.nist.gov/vuln/detail/CVE-2023-34231
• https://github.com/snowflakedb/gosnowflake/pull/757
• https://github.com/snowflakedb/gosnowflake/commit/e11a2a555f1b9f7adc1f01fb7b5e7f38fbbb2a1c
• https://github.com/snowflakedb/gosnowflake

CVE-2023-34231 · published 2023-06-09T22:53:25Z · modified 2026-09-10T03:49:54.396895104Z · JSON