CVE-2023-34232
1 advisory.
npm/snowflake-sdk CVE-2023-34232: high 7.3
Snowflake NodeJS Driver vulnerable to Command Injection
Action: Upgrade snowflake-sdk to 1.6.21 or later.
npm i snowflake-sdk@1.6.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.21 | - |
Fixed versions
| 1.6.21 |
Sources
- osv: GHSA-h53w-7qw7-vh5c
- https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-h53w-7qw7-vh5c
- https://nvd.nist.gov/vuln/detail/CVE-2023-34232
- https://github.com/snowflakedb/snowflake-connector-nodejs/pull/465
- https://github.com/snowflakedb/snowflake-connector-nodejs/commit/0c9622ae12cd7d627df404b73a783b4a5f60728a
- https://community.snowflake.com/s/article/Node-js-Driver-Release-Notes
- https://github.com/snowflakedb/snowflake-connector-nodejs
CVE-2023-34232 · published · modified · JSON