Vulnerability Report: GO-2026-6665
- CVE-2026-86597, GHSA-qqj6-54q6-cxv6
- Affects: github.com/snowflakedb/gosnowflake, github.com/snowflakedb/gosnowflake/v2
- Published: Oct 07, 2026
Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake
For detailed information about this vulnerability, visit https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6.
Affected Packages
-
PathVersionsSymbols
-
all versions, no known fixed
23 affected symbols
- Array
- ArrowBatch.ArrowSnowflakeTimestampToTime
- ArrowBatch.Fetch
- ArrowStreamBatch.GetStream
- CertRevocationCheckMode.String
- Connector.Connect
- DSN
- DeregisterTLSConfig
- GetConfigFromEnv
- GetFromEnv
- Location
- LocationWithOffsetString
- NewUUID
- ParseDSN
- RegisterTLSConfig
- SFCallerPrettyfier
- ScanSnowflakeParameter
- SnowflakeDriver.Open
- SnowflakeDriver.OpenConnector
- SnowflakeDriver.OpenWithConfig
- SnowflakeError.Error
- StartOCSPCacheClearer
- UUID.String
-
before v2.2.0
20 affected symbols
- Array
- ArrowStreamBatch.GetStream
- ArrowStreamBatch.Reset
- Connector.Connect
- DSN
- DeregisterTLSConfig
- GetConfigFromEnv
- GetFromEnv
- Location
- LocationWithOffsetString
- NewUUID
- ParseDSN
- RegisterTLSConfig
- ScanSnowflakeParameter
- SnowflakeDriver.Open
- SnowflakeDriver.OpenConnector
- SnowflakeDriver.OpenWithConfig
- StartOCSPCacheClearer
- StopOCSPCacheClearer
- UUID.String
-
before v2.2.0
-
before v2.2.0
Aliases
References
- https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6
- https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a
- https://github.com/snowflakedb/gosnowflake/pull/1844
- https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026
- https://vuln.go.dev/ID/GO-2026-6665.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.