data/reports: add GO-2026-6665 - data/reports/GO-2026-6665.yaml Fixes golang/vulndb#6665 Change-Id: Ifa5d7a9269d29583a1b4f5c16da754c2c1ad2857 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/845866 LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: Nicholas Husin <husin@google.com> Auto-Submit: Ian Alexander <jitsu@google.com> Reviewed-by: Nicholas Husin <nsh@golang.org>
diff --git a/data/osv/GO-2026-6665.json b/data/osv/GO-2026-6665.json new file mode 100644 index 0000000..5d268ff --- /dev/null +++ b/data/osv/GO-2026-6665.json
@@ -0,0 +1,436 @@ +{ + "schema_version": "1.3.1", + "id": "GO-2026-6665", + "modified": "0001-01-01T00:00:00Z", + "published": "0001-01-01T00:00:00Z", + "aliases": [ + "CVE-2026-86597", + "GHSA-qqj6-54q6-cxv6" + ], + "summary": "Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake", + "details": "Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake", + "affected": [ + { + "package": { + "name": "github.com/snowflakedb/gosnowflake", + "ecosystem": "Go" + }, + "ranges": [ + { + "type": "SEMVER", + "events": [ + { + "introduced": "0" + } + ] + } + ], + "ecosystem_specific": { + "imports": [ + { + "path": "github.com/snowflakedb/gosnowflake", + "symbols": [ + "Array", + "ArrowBatch.ArrowSnowflakeTimestampToTime", + "ArrowBatch.Fetch", + "ArrowStreamBatch.GetStream", + "CertRevocationCheckMode.String", + "Connector.Connect", + "DSN", + "DeregisterTLSConfig", + "GetConfigFromEnv", + "GetFromEnv", + "Location", + "LocationWithOffsetString", + "NewUUID", + "ParseDSN", + "RegisterTLSConfig", + "SFCallerPrettyfier", + "ScanSnowflakeParameter", + "SnowflakeDriver.Open", + "SnowflakeDriver.OpenConnector", + "SnowflakeDriver.OpenWithConfig", + "SnowflakeError.Error", + "StartOCSPCacheClearer", + "UUID.String", + "cancelQuery", + "checkParsingError", + "closeSession", + "defaultLogger.CloseFileOnLoggerReplace", + "defaultLogger.Debug", + "defaultLogger.DebugFn", + "defaultLogger.Debugf", + "defaultLogger.Debugln", + "defaultLogger.Error", + "defaultLogger.ErrorFn", + "defaultLogger.Errorf", + "defaultLogger.Errorln", + "defaultLogger.Exit", + "defaultLogger.Fatal", + "defaultLogger.FatalFn", + "defaultLogger.Fatalf", + "defaultLogger.Fatalln", + "defaultLogger.GetLogLevel", + "defaultLogger.Info", + "defaultLogger.InfoFn", + "defaultLogger.Infof", + "defaultLogger.Infoln", + "defaultLogger.Log", + "defaultLogger.LogFn", + "defaultLogger.Logf", + "defaultLogger.Logln", + "defaultLogger.Panic", + "defaultLogger.PanicFn", + "defaultLogger.Panicf", + "defaultLogger.Panicln", + "defaultLogger.Print", + "defaultLogger.PrintFn", + "defaultLogger.Printf", + "defaultLogger.Println", + "defaultLogger.Replace", + "defaultLogger.SetLogLevel", + "defaultLogger.Trace", + "defaultLogger.TraceFn", + "defaultLogger.Tracef", + "defaultLogger.Traceln", + "defaultLogger.Warn", + "defaultLogger.WarnFn", + "defaultLogger.Warnf", + "defaultLogger.Warning", + "defaultLogger.WarningFn", + "defaultLogger.Warningf", + "defaultLogger.Warningln", + "defaultLogger.Warnln", + "defaultLogger.WithContext", + "defaultLogger.WithError", + "defaultLogger.WithField", + "defaultLogger.WithFields", + "defaultLogger.WithTime", + "downloadChunkHelper", + "encryptionWrapper.UnmarshalJSON", + "getSSO", + "heartbeat.heartbeatMain", + "httpClient.Get", + "httpClient.Post", + "largeResultSetReader.Read", + "maskSecrets", + "miniCoreError.Error", + "postAuth", + "postAuthOKTA", + "postRestfulQueryHelper", + "renewRestfulSession", + "secretmasker.maskConnectionToken", + "secretmasker.maskSasToken", + "sfTextFormatter.Format", + "snowflakeArrowStreamChunkDownloader.GetBatches", + "snowflakeArrowStreamChunkDownloader.Location", + "snowflakeArrowStreamChunkDownloader.NextResultSet", + "snowflakeConn.AddTelemetryData", + "snowflakeConn.Begin", + "snowflakeConn.BeginTx", + "snowflakeConn.Close", + "snowflakeConn.Exec", + "snowflakeConn.ExecContext", + "snowflakeConn.GetQueryStatus", + "snowflakeConn.Ping", + "snowflakeConn.Prepare", + "snowflakeConn.PrepareContext", + "snowflakeConn.Query", + "snowflakeConn.QueryArrowStream", + "snowflakeConn.QueryContext", + "snowflakeRows.Close", + "snowflakeRows.ColumnTypeDatabaseTypeName", + "snowflakeRows.ColumnTypeScanType", + "snowflakeRows.Columns", + "snowflakeRows.GetArrowBatches", + "snowflakeRows.HasNextResultSet", + "snowflakeRows.Next", + "snowflakeRows.NextResultSet", + "snowflakeStmt.Close", + "snowflakeStmt.Exec", + "snowflakeStmt.ExecContext", + "snowflakeStmt.NumInput", + "snowflakeStmt.Query", + "snowflakeStmt.QueryContext", + "snowflakeTx.Commit", + "snowflakeTx.Rollback", + "structuredObjectWriterContext.WriteAll", + "structuredObjectWriterContext.WriteNullRaw", + "structuredObjectWriterContext.WriteNullTime", + "structuredObjectWriterContext.WriteNullableStruct", + "structuredObjectWriterContext.WriteRaw", + "structuredObjectWriterContext.WriteStruct", + "structuredObjectWriterContext.WriteTime", + "structuredType.GetBigFloat", + "structuredType.GetBigInt", + "structuredType.GetBool", + "structuredType.GetByte", + "structuredType.GetBytes", + "structuredType.GetFloat32", + "structuredType.GetFloat64", + "structuredType.GetInt16", + "structuredType.GetInt32", + "structuredType.GetInt64", + "structuredType.GetNullBool", + "structuredType.GetNullByte", + "structuredType.GetNullFloat64", + "structuredType.GetNullInt16", + "structuredType.GetNullInt32", + "structuredType.GetNullInt64", + "structuredType.GetNullString", + "structuredType.GetNullTime", + "structuredType.GetString", + "structuredType.GetStruct", + "structuredType.GetTime", + "structuredType.ScanTo", + "transportConfig.String", + "wrapReader.Close" + ] + } + ] + } + }, + { + "package": { + "name": "github.com/snowflakedb/gosnowflake/v2", + "ecosystem": "Go" + }, + "ranges": [ + { + "type": "SEMVER", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.2.0" + } + ] + } + ], + "ecosystem_specific": { + "imports": [ + { + "path": "github.com/snowflakedb/gosnowflake/v2", + "symbols": [ + "Array", + "ArrowStreamBatch.GetStream", + "ArrowStreamBatch.Reset", + "Connector.Connect", + "DSN", + "DeregisterTLSConfig", + "GetConfigFromEnv", + "GetFromEnv", + "Location", + "LocationWithOffsetString", + "NewUUID", + "ParseDSN", + "RegisterTLSConfig", + "ScanSnowflakeParameter", + "SnowflakeDriver.Open", + "SnowflakeDriver.OpenConnector", + "SnowflakeDriver.OpenWithConfig", + "StartOCSPCacheClearer", + "StopOCSPCacheClearer", + "UUID.String", + "cancelQuery", + "cancelableStream.Close", + "cancelableStream.Read", + "closeSession", + "downloadChunkHelper", + "encryptionWrapper.UnmarshalJSON", + "getSSO", + "heartbeat.heartbeatMain", + "httpClient.Get", + "httpClient.Post", + "largeResultSetReader.Read", + "miniCoreError.Error", + "postAuth", + "postAuthOKTA", + "postRestfulQueryHelper", + "renewRestfulSession", + "snowflakeArrowStreamChunkDownloader.GetBatches", + "snowflakeArrowStreamChunkDownloader.Location", + "snowflakeArrowStreamChunkDownloader.NextResultSet", + "snowflakeConn.AddTelemetryData", + "snowflakeConn.Begin", + "snowflakeConn.BeginTx", + "snowflakeConn.Close", + "snowflakeConn.Exec", + "snowflakeConn.ExecContext", + "snowflakeConn.GetQueryStatus", + "snowflakeConn.Ping", + "snowflakeConn.Prepare", + "snowflakeConn.PrepareContext", + "snowflakeConn.Query", + "snowflakeConn.QueryArrowStream", + "snowflakeConn.QueryContext", + "snowflakeRows.Close", + "snowflakeRows.ColumnTypeDatabaseTypeName", + "snowflakeRows.ColumnTypeScanType", + "snowflakeRows.Columns", + "snowflakeRows.GetArrowBatches", + "snowflakeRows.HasNextResultSet", + "snowflakeRows.Next", + "snowflakeRows.NextResultSet", + "snowflakeStmt.Close", + "snowflakeStmt.Exec", + "snowflakeStmt.ExecContext", + "snowflakeStmt.NumInput", + "snowflakeStmt.Query", + "snowflakeStmt.QueryContext", + "snowflakeTx.Commit", + "snowflakeTx.Rollback", + "streamWrapReader.Close", + "structuredObjectWriterContext.WriteAll", + "structuredObjectWriterContext.WriteNullRaw", + "structuredObjectWriterContext.WriteNullTime", + "structuredObjectWriterContext.WriteNullableStruct", + "structuredObjectWriterContext.WriteRaw", + "structuredObjectWriterContext.WriteStruct", + "structuredObjectWriterContext.WriteTime", + "structuredType.GetBigFloat", + "structuredType.GetBigInt", + "structuredType.GetBool", + "structuredType.GetByte", + "structuredType.GetBytes", + "structuredType.GetFloat32", + "structuredType.GetFloat64", + "structuredType.GetInt16", + "structuredType.GetInt32", + "structuredType.GetInt64", + "structuredType.GetNullBool", + "structuredType.GetNullByte", + "structuredType.GetNullFloat64", + "structuredType.GetNullInt16", + "structuredType.GetNullInt32", + "structuredType.GetNullInt64", + "structuredType.GetNullString", + "structuredType.GetNullTime", + "structuredType.GetString", + "structuredType.GetStruct", + "structuredType.GetTime", + "structuredType.ScanTo", + "transportConfig.String" + ] + }, + { + "path": "github.com/snowflakedb/gosnowflake/v2/internal/config", + "symbols": [ + "DSN", + "DeregisterTLSConfig", + "FillMissingConfigParameters", + "GetToken", + "HandleSingleParam", + "LoadConnectionConfig", + "ParseDSN", + "ParseToml", + "ReadToken", + "RegisterTLSConfig", + "ValidateFilePermission", + "checkParsingError" + ] + }, + { + "path": "github.com/snowflakedb/gosnowflake/v2/internal/logger", + "symbols": [ + "MaskSecrets", + "Proxy.Debug", + "Proxy.Debugf", + "Proxy.Error", + "Proxy.Errorf", + "Proxy.Fatal", + "Proxy.Fatalf", + "Proxy.Info", + "Proxy.Infof", + "Proxy.Trace", + "Proxy.Tracef", + "Proxy.Warn", + "Proxy.Warnf", + "Proxy.WithContext", + "Proxy.WithField", + "Proxy.WithFields", + "levelFilteringEntry.Debug", + "levelFilteringEntry.Debugf", + "levelFilteringEntry.Error", + "levelFilteringEntry.Errorf", + "levelFilteringEntry.Fatal", + "levelFilteringEntry.Fatalf", + "levelFilteringEntry.Info", + "levelFilteringEntry.Infof", + "levelFilteringEntry.Trace", + "levelFilteringEntry.Tracef", + "levelFilteringEntry.Warn", + "levelFilteringEntry.Warnf", + "levelFilteringLogger.Debug", + "levelFilteringLogger.Debugf", + "levelFilteringLogger.Error", + "levelFilteringLogger.Errorf", + "levelFilteringLogger.Fatal", + "levelFilteringLogger.Fatalf", + "levelFilteringLogger.Info", + "levelFilteringLogger.Infof", + "levelFilteringLogger.Trace", + "levelFilteringLogger.Tracef", + "levelFilteringLogger.Warn", + "levelFilteringLogger.Warnf", + "levelFilteringLogger.WithContext", + "levelFilteringLogger.WithField", + "levelFilteringLogger.WithFields", + "rawLogger.WithContext", + "secretMaskingEntry.Debug", + "secretMaskingEntry.Debugf", + "secretMaskingEntry.Error", + "secretMaskingEntry.Errorf", + "secretMaskingEntry.Fatal", + "secretMaskingEntry.Fatalf", + "secretMaskingEntry.Info", + "secretMaskingEntry.Infof", + "secretMaskingEntry.Trace", + "secretMaskingEntry.Tracef", + "secretMaskingEntry.Warn", + "secretMaskingEntry.Warnf", + "secretMaskingLogger.Debug", + "secretMaskingLogger.Debugf", + "secretMaskingLogger.Error", + "secretMaskingLogger.Errorf", + "secretMaskingLogger.Fatal", + "secretMaskingLogger.Fatalf", + "secretMaskingLogger.Info", + "secretMaskingLogger.Infof", + "secretMaskingLogger.Trace", + "secretMaskingLogger.Tracef", + "secretMaskingLogger.Warn", + "secretMaskingLogger.Warnf", + "secretMaskingLogger.WithContext", + "secretMaskingLogger.WithField", + "secretMaskingLogger.WithFields" + ] + } + ] + } + } + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6" + }, + { + "type": "FIX", + "url": "https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a" + }, + { + "type": "FIX", + "url": "https://github.com/snowflakedb/gosnowflake/pull/1844" + }, + { + "type": "WEB", + "url": "https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026" + } + ], + "database_specific": { + "url": "https://pkg.go.dev/vuln/GO-2026-6665", + "review_status": "REVIEWED" + } +} \ No newline at end of file
diff --git a/data/reports/GO-2026-6665.yaml b/data/reports/GO-2026-6665.yaml new file mode 100644 index 0000000..e52c2b4 --- /dev/null +++ b/data/reports/GO-2026-6665.yaml
@@ -0,0 +1,375 @@ +id: GO-2026-6665 +modules: + - module: github.com/snowflakedb/gosnowflake + vulnerable_at: 1.19.1 + packages: + - package: github.com/snowflakedb/gosnowflake + symbols: + - cancelQuery + - checkParsingError + - closeSession + - downloadChunkHelper + - getSSO + - heartbeat.heartbeatMain + - maskSecrets + - postAuth + - postAuthOKTA + - postRestfulQueryHelper + - renewRestfulSession + - secretmasker.maskConnectionToken + - secretmasker.maskSasToken + derived_symbols: + - Array + - ArrowBatch.ArrowSnowflakeTimestampToTime + - ArrowBatch.Fetch + - ArrowStreamBatch.GetStream + - CertRevocationCheckMode.String + - Connector.Connect + - DSN + - DeregisterTLSConfig + - GetConfigFromEnv + - GetFromEnv + - Location + - LocationWithOffsetString + - NewUUID + - ParseDSN + - RegisterTLSConfig + - SFCallerPrettyfier + - ScanSnowflakeParameter + - SnowflakeDriver.Open + - SnowflakeDriver.OpenConnector + - SnowflakeDriver.OpenWithConfig + - SnowflakeError.Error + - StartOCSPCacheClearer + - UUID.String + - defaultLogger.CloseFileOnLoggerReplace + - defaultLogger.Debug + - defaultLogger.DebugFn + - defaultLogger.Debugf + - defaultLogger.Debugln + - defaultLogger.Error + - defaultLogger.ErrorFn + - defaultLogger.Errorf + - defaultLogger.Errorln + - defaultLogger.Exit + - defaultLogger.Fatal + - defaultLogger.FatalFn + - defaultLogger.Fatalf + - defaultLogger.Fatalln + - defaultLogger.GetLogLevel + - defaultLogger.Info + - defaultLogger.InfoFn + - defaultLogger.Infof + - defaultLogger.Infoln + - defaultLogger.Log + - defaultLogger.LogFn + - defaultLogger.Logf + - defaultLogger.Logln + - defaultLogger.Panic + - defaultLogger.PanicFn + - defaultLogger.Panicf + - defaultLogger.Panicln + - defaultLogger.Print + - defaultLogger.PrintFn + - defaultLogger.Printf + - defaultLogger.Println + - defaultLogger.Replace + - defaultLogger.SetLogLevel + - defaultLogger.Trace + - defaultLogger.TraceFn + - defaultLogger.Tracef + - defaultLogger.Traceln + - defaultLogger.Warn + - defaultLogger.WarnFn + - defaultLogger.Warnf + - defaultLogger.Warning + - defaultLogger.WarningFn + - defaultLogger.Warningf + - defaultLogger.Warningln + - defaultLogger.Warnln + - defaultLogger.WithContext + - defaultLogger.WithError + - defaultLogger.WithField + - defaultLogger.WithFields + - defaultLogger.WithTime + - encryptionWrapper.UnmarshalJSON + - httpClient.Get + - httpClient.Post + - largeResultSetReader.Read + - miniCoreError.Error + - sfTextFormatter.Format + - snowflakeArrowStreamChunkDownloader.GetBatches + - snowflakeArrowStreamChunkDownloader.Location + - snowflakeArrowStreamChunkDownloader.NextResultSet + - snowflakeConn.AddTelemetryData + - snowflakeConn.Begin + - snowflakeConn.BeginTx + - snowflakeConn.Close + - snowflakeConn.Exec + - snowflakeConn.ExecContext + - snowflakeConn.GetQueryStatus + - snowflakeConn.Ping + - snowflakeConn.Prepare + - snowflakeConn.PrepareContext + - snowflakeConn.Query + - snowflakeConn.QueryArrowStream + - snowflakeConn.QueryContext + - snowflakeRows.Close + - snowflakeRows.ColumnTypeDatabaseTypeName + - snowflakeRows.ColumnTypeScanType + - snowflakeRows.Columns + - snowflakeRows.GetArrowBatches + - snowflakeRows.HasNextResultSet + - snowflakeRows.Next + - snowflakeRows.NextResultSet + - snowflakeStmt.Close + - snowflakeStmt.Exec + - snowflakeStmt.ExecContext + - snowflakeStmt.NumInput + - snowflakeStmt.Query + - snowflakeStmt.QueryContext + - snowflakeTx.Commit + - snowflakeTx.Rollback + - structuredObjectWriterContext.WriteAll + - structuredObjectWriterContext.WriteNullRaw + - structuredObjectWriterContext.WriteNullTime + - structuredObjectWriterContext.WriteNullableStruct + - structuredObjectWriterContext.WriteRaw + - structuredObjectWriterContext.WriteStruct + - structuredObjectWriterContext.WriteTime + - structuredType.GetBigFloat + - structuredType.GetBigInt + - structuredType.GetBool + - structuredType.GetByte + - structuredType.GetBytes + - structuredType.GetFloat32 + - structuredType.GetFloat64 + - structuredType.GetInt16 + - structuredType.GetInt32 + - structuredType.GetInt64 + - structuredType.GetNullBool + - structuredType.GetNullByte + - structuredType.GetNullFloat64 + - structuredType.GetNullInt16 + - structuredType.GetNullInt32 + - structuredType.GetNullInt64 + - structuredType.GetNullString + - structuredType.GetNullTime + - structuredType.GetString + - structuredType.GetStruct + - structuredType.GetTime + - structuredType.ScanTo + - transportConfig.String + - wrapReader.Close + - module: github.com/snowflakedb/gosnowflake/v2 + versions: + - fixed: 2.2.0 + vulnerable_at: 2.1.0 + packages: + - package: github.com/snowflakedb/gosnowflake/v2 + symbols: + - cancelQuery + - closeSession + - downloadChunkHelper + - getSSO + - heartbeat.heartbeatMain + - postAuth + - postAuthOKTA + - postRestfulQueryHelper + - renewRestfulSession + derived_symbols: + - Array + - ArrowStreamBatch.GetStream + - ArrowStreamBatch.Reset + - Connector.Connect + - DSN + - DeregisterTLSConfig + - GetConfigFromEnv + - GetFromEnv + - Location + - LocationWithOffsetString + - NewUUID + - ParseDSN + - RegisterTLSConfig + - ScanSnowflakeParameter + - SnowflakeDriver.Open + - SnowflakeDriver.OpenConnector + - SnowflakeDriver.OpenWithConfig + - StartOCSPCacheClearer + - StopOCSPCacheClearer + - UUID.String + - cancelableStream.Close + - cancelableStream.Read + - encryptionWrapper.UnmarshalJSON + - httpClient.Get + - httpClient.Post + - largeResultSetReader.Read + - miniCoreError.Error + - snowflakeArrowStreamChunkDownloader.GetBatches + - snowflakeArrowStreamChunkDownloader.Location + - snowflakeArrowStreamChunkDownloader.NextResultSet + - snowflakeConn.AddTelemetryData + - snowflakeConn.Begin + - snowflakeConn.BeginTx + - snowflakeConn.Close + - snowflakeConn.Exec + - snowflakeConn.ExecContext + - snowflakeConn.GetQueryStatus + - snowflakeConn.Ping + - snowflakeConn.Prepare + - snowflakeConn.PrepareContext + - snowflakeConn.Query + - snowflakeConn.QueryArrowStream + - snowflakeConn.QueryContext + - snowflakeRows.Close + - snowflakeRows.ColumnTypeDatabaseTypeName + - snowflakeRows.ColumnTypeScanType + - snowflakeRows.Columns + - snowflakeRows.GetArrowBatches + - snowflakeRows.HasNextResultSet + - snowflakeRows.Next + - snowflakeRows.NextResultSet + - snowflakeStmt.Close + - snowflakeStmt.Exec + - snowflakeStmt.ExecContext + - snowflakeStmt.NumInput + - snowflakeStmt.Query + - snowflakeStmt.QueryContext + - snowflakeTx.Commit + - snowflakeTx.Rollback + - streamWrapReader.Close + - structuredObjectWriterContext.WriteAll + - structuredObjectWriterContext.WriteNullRaw + - structuredObjectWriterContext.WriteNullTime + - structuredObjectWriterContext.WriteNullableStruct + - structuredObjectWriterContext.WriteRaw + - structuredObjectWriterContext.WriteStruct + - structuredObjectWriterContext.WriteTime + - structuredType.GetBigFloat + - structuredType.GetBigInt + - structuredType.GetBool + - structuredType.GetByte + - structuredType.GetBytes + - structuredType.GetFloat32 + - structuredType.GetFloat64 + - structuredType.GetInt16 + - structuredType.GetInt32 + - structuredType.GetInt64 + - structuredType.GetNullBool + - structuredType.GetNullByte + - structuredType.GetNullFloat64 + - structuredType.GetNullInt16 + - structuredType.GetNullInt32 + - structuredType.GetNullInt64 + - structuredType.GetNullString + - structuredType.GetNullTime + - structuredType.GetString + - structuredType.GetStruct + - structuredType.GetTime + - structuredType.ScanTo + - transportConfig.String + - package: github.com/snowflakedb/gosnowflake/v2/internal/config + symbols: + - checkParsingError + derived_symbols: + - DSN + - DeregisterTLSConfig + - FillMissingConfigParameters + - GetToken + - HandleSingleParam + - LoadConnectionConfig + - ParseDSN + - ParseToml + - ReadToken + - RegisterTLSConfig + - ValidateFilePermission + - package: github.com/snowflakedb/gosnowflake/v2/internal/logger + symbols: + - MaskSecrets + derived_symbols: + - Proxy.Debug + - Proxy.Debugf + - Proxy.Error + - Proxy.Errorf + - Proxy.Fatal + - Proxy.Fatalf + - Proxy.Info + - Proxy.Infof + - Proxy.Trace + - Proxy.Tracef + - Proxy.Warn + - Proxy.Warnf + - Proxy.WithContext + - Proxy.WithField + - Proxy.WithFields + - levelFilteringEntry.Debug + - levelFilteringEntry.Debugf + - levelFilteringEntry.Error + - levelFilteringEntry.Errorf + - levelFilteringEntry.Fatal + - levelFilteringEntry.Fatalf + - levelFilteringEntry.Info + - levelFilteringEntry.Infof + - levelFilteringEntry.Trace + - levelFilteringEntry.Tracef + - levelFilteringEntry.Warn + - levelFilteringEntry.Warnf + - levelFilteringLogger.Debug + - levelFilteringLogger.Debugf + - levelFilteringLogger.Error + - levelFilteringLogger.Errorf + - levelFilteringLogger.Fatal + - levelFilteringLogger.Fatalf + - levelFilteringLogger.Info + - levelFilteringLogger.Infof + - levelFilteringLogger.Trace + - levelFilteringLogger.Tracef + - levelFilteringLogger.Warn + - levelFilteringLogger.Warnf + - levelFilteringLogger.WithContext + - levelFilteringLogger.WithField + - levelFilteringLogger.WithFields + - rawLogger.WithContext + - secretMaskingEntry.Debug + - secretMaskingEntry.Debugf + - secretMaskingEntry.Error + - secretMaskingEntry.Errorf + - secretMaskingEntry.Fatal + - secretMaskingEntry.Fatalf + - secretMaskingEntry.Info + - secretMaskingEntry.Infof + - secretMaskingEntry.Trace + - secretMaskingEntry.Tracef + - secretMaskingEntry.Warn + - secretMaskingEntry.Warnf + - secretMaskingLogger.Debug + - secretMaskingLogger.Debugf + - secretMaskingLogger.Error + - secretMaskingLogger.Errorf + - secretMaskingLogger.Fatal + - secretMaskingLogger.Fatalf + - secretMaskingLogger.Info + - secretMaskingLogger.Infof + - secretMaskingLogger.Trace + - secretMaskingLogger.Tracef + - secretMaskingLogger.Warn + - secretMaskingLogger.Warnf + - secretMaskingLogger.WithContext + - secretMaskingLogger.WithField + - secretMaskingLogger.WithFields +summary: |- + Snowflake Go Driver writes sensitive information to logs in + github.com/snowflakedb/gosnowflake +cves: + - CVE-2026-86597 +ghsas: + - GHSA-qqj6-54q6-cxv6 +references: + - advisory: https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6 + - fix: https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a + - fix: https://github.com/snowflakedb/gosnowflake/pull/1844 + - web: https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026 +source: + id: GHSA-qqj6-54q6-cxv6 + created: 2026-10-06T10:12:14.732793-04:00 +review_status: REVIEWED