{"action":"Upgrade github.com/snowflakedb/gosnowflake to 1.13.3 or later.","affected":[{"fixed":"1.13.3","introduced":"1.7.0"}],"component":"github.com/snowflakedb/gosnowflake","cve_ids":["CVE-2025-46327"],"ecosystem":"Go","epss":0.00135,"exploited":false,"fixed_versions":["1.13.3"],"ghsa_id":"GHSA-6jgm-j7h2-2fqg","id":"tcs_01M5KG8CFDE86Y1CDRHH59S8EV","modified_at":"2026-02-04T02:18:27.170226Z","published_at":"2025-05-05T16:13:00Z","references":["https://osv.dev/vulnerability/GO-2025-3650","https://github.com/snowflakedb/gosnowflake/security/advisories/GHSA-6jgm-j7h2-2fqg","https://github.com/snowflakedb/gosnowflake/commit/ba94a4800e23621eff558ef18ce4b96ec5489ff0"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GO-2025-3650","url":"https://osv.dev/vulnerability/GO-2025-3650"},{"source":"nvd","source_id":"CVE-2025-46327","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46327"}],"summary":"Go Snowflake Driver has race condition checking access to Easy Logging config file in github.com/snowflakedb/gosnowflake"}