VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/snowflakedb/gosnowflake: vulnerability history, versions and safety

github.com/snowflakedb/gosnowflake is a package in the Go ecosystem. Vulert records 4 vulnerabilities for it across 120 releases, from Jun 2023 to Oct 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
4 vulnerabilities recorded H1 L1 U2
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
1 in the last 12 months

Most recent disclosure 07 Oct 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/snowflakedb/gosnowflake vulnerabilities

Vulert verdict on github.com/snowflakedb/gosnowflake v1.19.1 i

Updated on 23 Oct 2026

Careful: v1.19.1 has 2 known vulnerabilities, and 1 has no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 60/100
  • Security Some issues to review
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v1.19.1 — affected i
  • Vulnerabilities on record 4 over 3 years · 1 in the last year i
  • Latest disclosure 07 Oct 2026 i
  • Highest CVSS 7.3 i
  • With no published fix 1 i
  • Stars 367 i
  • OpenSSF scorecard 4/10 i
  • Last release 6 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/snowflakedb/gosnowflake, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.19.1 08 Apr 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260227153038-5cb215529aec 27 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260225143843-d1cc884aaa90 25 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260219110826-a7ff25839bca 19 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260217093423-4af49ca77f0c 17 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260216143630-31af9b94cd8d 16 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260212150915-f26972559770 12 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260209121825-b06f4bcf0894 09 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.1-0.20260205172900-2db191056c17 05 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.19.0 03 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260203082408-47f6de1f22fc 03 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260202114311-e02770e2dc81 02 Feb 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260130122312-a9400b716257 30 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260128190257-5248bb13f3c5 28 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260120093636-45b74c87c0c6 20 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260119114318-e18c784449d3 19 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260115113326-1922ccebdd8e 15 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260115074425-e36821d969ef 15 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260113143858-9160224c3d86 13 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20260109114505-3caf078712e2 09 Jan 2026 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20251217112017-149dcd6a66ff 17 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.2-0.20251215101729-e168e8f47cd3 15 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1 15 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251215075246-33b826e5d548 15 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251211113244-700f2ff1824c 11 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251209124641-1a1a80979c11 09 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251209062113-b477061cbde8 09 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251208132137-8582c9401740 08 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251208090636-fc65294367d0 08 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251205055606-a835140fc79d 05 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251204103752-0a86ece3a708 04 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251203082847-b46142a2be43 03 Dec 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251126142823-67874a7dba9f 26 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251124092330-dd4f1822472a 24 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.18.1-0.20251121223749-d4129fcbbf08 21 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251120095823-a686da1d5c0d 20 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.18.0 20 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251119101033-693183914df5 19 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251118122332-6643a1d64d34 18 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251118080956-39610ec84cfb 18 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251117134011-41f470c0dc32 17 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251114090530-8544c68b7ff6 14 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251112122954-904defcaa76b 12 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251112085719-faefff1b7b41 12 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251107100214-e37556b03a0f 07 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251106172909-0779b626b602 06 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251106124141-58a4bc0af095 06 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.2-0.20251104232255-3cb75b072a24 04 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.1 04 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251104083139-31eacf2bc9a4 04 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251103164347-147a34fccbf6 03 Nov 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251031135133-ca42b3c17865 31 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251030212322-107e39b4d617 30 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251030150631-b5030199c629 30 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251028144317-8c48f5dde79d 28 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251027105703-31d6195b7717 27 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251027104917-99e518b9f749 27 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251027071332-e24ce3d16377 27 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251022170245-89180bd8b2c1 22 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251021114600-9c2fa0f8422c 21 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251020201545-f0b49f04a849 20 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251017111249-4b9577207137 17 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251015121103-3574ef8b0d41 15 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251015060922-cbd38c16092f 15 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251014082545-1a798e3124a0 14 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251010085804-6cc8f9a6ec1c 10 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251009130817-a577d7b8500c 09 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251009111232-d090d44ab561 09 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251009072657-8f80ed386839 09 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20251001094250-c5aaa840c2d7 01 Oct 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20250930082644-16df2e02fde5 30 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.17.1-0.20250929181800-7580b070985d 29 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.17.0 29 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250929130955-e63a9debff4e 29 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250927124642-2a9e6904436e 27 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250918121152-9120f1c9c7e0 18 Sep 2025 H1 U1 Apache-2.0 No Details →
v0.0.0-20250911095445-20c4d105d9a0 11 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250911095445-20c4d105d9a0 11 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250909095846-b3cb0a89a1db 09 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250909063059-7a354393222d 09 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250908113755-cbb8be1c4480 08 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250908084222-b63c6182daa6 08 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250904000656-31b8ccfa2eae 04 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250902190548-113f716cb5f2 02 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250901130440-3e78045eef1f 01 Sep 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250829104325-1a9b6579daa4 29 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250827174036-50f3f3d6ff69 27 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250827123355-11d879235177 27 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250827062626-4bfe92de3b8d 27 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250826180222-bcaef17e66e6 26 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250826115619-4a56679f5f68 26 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250826054254-fb7d0d021666 26 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250825104343-f76304431bff 25 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250822105753-858561dce1e0 22 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250822090837-6d0b0fc99166 22 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250822071909-8d2ec8d5386c 22 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250820090607-cdd89c1ada1b 20 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250820053909-962baea371a3 20 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250819163613-c00ada53459b 19 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250819085908-e30e9c96a2b9 19 Aug 2025 H1 U1 Apache-2.0 No Details →
v1.16.1-0.20250818124135-ffb318f7c117 18 Aug 2025 H1 U1 — No Details →
v1.16.1-0.20250815130559-a0cf4e15b8d5 15 Aug 2025 H1 U1 — No Details →
v1.16.0 14 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250813205652-9429901dd013 13 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250812162304-563871fb7ab9 12 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250812092006-e40f45002c8d 12 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250811165936-a52df341a366 11 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250811113820-a64a09b996dd 11 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250810230831-263aa01709f6 10 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250808154754-bbb59306daab 08 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250807085840-95b26780729a 07 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250806113311-bb48e7905762 06 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250804094411-4055b4eb1ebb 04 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250801044339-f645d2fc97b0 01 Aug 2025 H1 U1 — No Details →
v1.15.1-0.20250731134420-41310e7849fe 31 Jul 2025 H1 U1 — No Details →
v1.15.1-0.20250730212014-bc9d66f51c82 30 Jul 2025 H1 U1 — No Details →
v1.15.1-0.20250730073944-1150cc41aca7 30 Jul 2025 H1 U1 — No Details →
v1.15.1-0.20250729143255-b40e3a756e4b 29 Jul 2025 H1 U1 — No Details →
v1.15.1-0.20250729084945-31b167fb3021 29 Jul 2025 H1 U1 — No Details →
v1.15.1-0.20250727085020-12a24659a788 27 Jul 2025 H1 U1 — No Details →

The newest 120 of 724 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 1
  • 2025 2
  • 2026 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 1 of the 4 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/snowflakedb/gosnowflake

The 4 most severe of 4 vulnerabilities recorded for this package

Search all 4 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-34231: Snowflake Golang Driver Command Injection Vulnerability 7.3 high 1.6.19 09 Jun 2023
CVE-2025-46327: Go Snowflake Driver Race Condition in Easy Logging Configuration 3.3 low 1.13.3 28 Apr 2025
CVE-2025-46327: Go Snowflake Driver Race Condition in Easy Logging Config File Access N/A unrated 1.13.3 05 May 2025
CVE-2026-86597: Snowflake Go Driver Logs Sensitive Information N/A unrated No fix published 07 Oct 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/snowflakedb/gosnowflake

Is github.com/snowflakedb/gosnowflake safe to use?

Vulert records 4 vulnerabilities for github.com/snowflakedb/gosnowflake in Go: 0 critical, 1 high, 0 medium and 1 low, plus 2 not yet rated. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/snowflakedb/gosnowflake's Vulert package health score?

Vulert scores github.com/snowflakedb/gosnowflake 60/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/snowflakedb/gosnowflake affected?

Yes. v1.19.1, the version you would install today, has 2 known vulnerabilities, and 1 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/snowflakedb/gosnowflake should I use?

v1.19.1 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/snowflakedb/gosnowflake have?

4 vulnerabilities are recorded for github.com/snowflakedb/gosnowflake in the Go ecosystem: 0 critical, 1 high, 0 medium and 1 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/snowflakedb/gosnowflake vulnerabilities disclosed?

1 vulnerability was recorded for github.com/snowflakedb/gosnowflake in the last 12 months, and the oldest entry in this database dates to 09 Jun 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/snowflakedb/gosnowflake are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/snowflakedb/gosnowflake for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/snowflakedb/gosnowflake version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.