| { | |
| "schema_version": "1.3.1", | |
| "id": "GO-2026-6665", | |
| "modified": "0001-01-01T00:00:00Z", | |
| "published": "0001-01-01T00:00:00Z", | |
| "aliases": [ | |
| "CVE-2026-86597", | |
| "GHSA-qqj6-54q6-cxv6" | |
| ], | |
| "summary": "Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake", | |
| "details": "Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake", | |
| "affected": [ | |
| { | |
| "package": { | |
| "name": "github.com/snowflakedb/gosnowflake", | |
| "ecosystem": "Go" | |
| }, | |
| "ranges": [ | |
| { | |
| "type": "SEMVER", | |
| "events": [ | |
| { | |
| "introduced": "0" | |
| } | |
| ] | |
| } | |
| ], | |
| "ecosystem_specific": { | |
| "imports": [ | |
| { | |
| "path": "github.com/snowflakedb/gosnowflake", | |
| "symbols": [ | |
| "Array", | |
| "ArrowBatch.ArrowSnowflakeTimestampToTime", | |
| "ArrowBatch.Fetch", | |
| "ArrowStreamBatch.GetStream", | |
| "CertRevocationCheckMode.String", | |
| "Connector.Connect", | |
| "DSN", | |
| "DeregisterTLSConfig", | |
| "GetConfigFromEnv", | |
| "GetFromEnv", | |
| "Location", | |
| "LocationWithOffsetString", | |
| "NewUUID", | |
| "ParseDSN", | |
| "RegisterTLSConfig", | |
| "SFCallerPrettyfier", | |
| "ScanSnowflakeParameter", | |
| "SnowflakeDriver.Open", | |
| "SnowflakeDriver.OpenConnector", | |
| "SnowflakeDriver.OpenWithConfig", | |
| "SnowflakeError.Error", | |
| "StartOCSPCacheClearer", | |
| "UUID.String", | |
| "cancelQuery", | |
| "checkParsingError", | |
| "closeSession", | |
| "defaultLogger.CloseFileOnLoggerReplace", | |
| "defaultLogger.Debug", | |
| "defaultLogger.DebugFn", | |
| "defaultLogger.Debugf", | |
| "defaultLogger.Debugln", | |
| "defaultLogger.Error", | |
| "defaultLogger.ErrorFn", | |
| "defaultLogger.Errorf", | |
| "defaultLogger.Errorln", | |
| "defaultLogger.Exit", | |
| "defaultLogger.Fatal", | |
| "defaultLogger.FatalFn", | |
| "defaultLogger.Fatalf", | |
| "defaultLogger.Fatalln", | |
| "defaultLogger.GetLogLevel", | |
| "defaultLogger.Info", | |
| "defaultLogger.InfoFn", | |
| "defaultLogger.Infof", | |
| "defaultLogger.Infoln", | |
| "defaultLogger.Log", | |
| "defaultLogger.LogFn", | |
| "defaultLogger.Logf", | |
| "defaultLogger.Logln", | |
| "defaultLogger.Panic", | |
| "defaultLogger.PanicFn", | |
| "defaultLogger.Panicf", | |
| "defaultLogger.Panicln", | |
| "defaultLogger.Print", | |
| "defaultLogger.PrintFn", | |
| "defaultLogger.Printf", | |
| "defaultLogger.Println", | |
| "defaultLogger.Replace", | |
| "defaultLogger.SetLogLevel", | |
| "defaultLogger.Trace", | |
| "defaultLogger.TraceFn", | |
| "defaultLogger.Tracef", | |
| "defaultLogger.Traceln", | |
| "defaultLogger.Warn", | |
| "defaultLogger.WarnFn", | |
| "defaultLogger.Warnf", | |
| "defaultLogger.Warning", | |
| "defaultLogger.WarningFn", | |
| "defaultLogger.Warningf", | |
| "defaultLogger.Warningln", | |
| "defaultLogger.Warnln", | |
| "defaultLogger.WithContext", | |
| "defaultLogger.WithError", | |
| "defaultLogger.WithField", | |
| "defaultLogger.WithFields", | |
| "defaultLogger.WithTime", | |
| "downloadChunkHelper", | |
| "encryptionWrapper.UnmarshalJSON", | |
| "getSSO", | |
| "heartbeat.heartbeatMain", | |
| "httpClient.Get", | |
| "httpClient.Post", | |
| "largeResultSetReader.Read", | |
| "maskSecrets", | |
| "miniCoreError.Error", | |
| "postAuth", | |
| "postAuthOKTA", | |
| "postRestfulQueryHelper", | |
| "renewRestfulSession", | |
| "secretmasker.maskConnectionToken", | |
| "secretmasker.maskSasToken", | |
| "sfTextFormatter.Format", | |
| "snowflakeArrowStreamChunkDownloader.GetBatches", | |
| "snowflakeArrowStreamChunkDownloader.Location", | |
| "snowflakeArrowStreamChunkDownloader.NextResultSet", | |
| "snowflakeConn.AddTelemetryData", | |
| "snowflakeConn.Begin", | |
| "snowflakeConn.BeginTx", | |
| "snowflakeConn.Close", | |
| "snowflakeConn.Exec", | |
| "snowflakeConn.ExecContext", | |
| "snowflakeConn.GetQueryStatus", | |
| "snowflakeConn.Ping", | |
| "snowflakeConn.Prepare", | |
| "snowflakeConn.PrepareContext", | |
| "snowflakeConn.Query", | |
| "snowflakeConn.QueryArrowStream", | |
| "snowflakeConn.QueryContext", | |
| "snowflakeRows.Close", | |
| "snowflakeRows.ColumnTypeDatabaseTypeName", | |
| "snowflakeRows.ColumnTypeScanType", | |
| "snowflakeRows.Columns", | |
| "snowflakeRows.GetArrowBatches", | |
| "snowflakeRows.HasNextResultSet", | |
| "snowflakeRows.Next", | |
| "snowflakeRows.NextResultSet", | |
| "snowflakeStmt.Close", | |
| "snowflakeStmt.Exec", | |
| "snowflakeStmt.ExecContext", | |
| "snowflakeStmt.NumInput", | |
| "snowflakeStmt.Query", | |
| "snowflakeStmt.QueryContext", | |
| "snowflakeTx.Commit", | |
| "snowflakeTx.Rollback", | |
| "structuredObjectWriterContext.WriteAll", | |
| "structuredObjectWriterContext.WriteNullRaw", | |
| "structuredObjectWriterContext.WriteNullTime", | |
| "structuredObjectWriterContext.WriteNullableStruct", | |
| "structuredObjectWriterContext.WriteRaw", | |
| "structuredObjectWriterContext.WriteStruct", | |
| "structuredObjectWriterContext.WriteTime", | |
| "structuredType.GetBigFloat", | |
| "structuredType.GetBigInt", | |
| "structuredType.GetBool", | |
| "structuredType.GetByte", | |
| "structuredType.GetBytes", | |
| "structuredType.GetFloat32", | |
| "structuredType.GetFloat64", | |
| "structuredType.GetInt16", | |
| "structuredType.GetInt32", | |
| "structuredType.GetInt64", | |
| "structuredType.GetNullBool", | |
| "structuredType.GetNullByte", | |
| "structuredType.GetNullFloat64", | |
| "structuredType.GetNullInt16", | |
| "structuredType.GetNullInt32", | |
| "structuredType.GetNullInt64", | |
| "structuredType.GetNullString", | |
| "structuredType.GetNullTime", | |
| "structuredType.GetString", | |
| "structuredType.GetStruct", | |
| "structuredType.GetTime", | |
| "structuredType.ScanTo", | |
| "transportConfig.String", | |
| "wrapReader.Close" | |
| ] | |
| } | |
| ] | |
| } | |
| }, | |
| { | |
| "package": { | |
| "name": "github.com/snowflakedb/gosnowflake/v2", | |
| "ecosystem": "Go" | |
| }, | |
| "ranges": [ | |
| { | |
| "type": "SEMVER", | |
| "events": [ | |
| { | |
| "introduced": "0" | |
| }, | |
| { | |
| "fixed": "2.2.0" | |
| } | |
| ] | |
| } | |
| ], | |
| "ecosystem_specific": { | |
| "imports": [ | |
| { | |
| "path": "github.com/snowflakedb/gosnowflake/v2", | |
| "symbols": [ | |
| "Array", | |
| "ArrowStreamBatch.GetStream", | |
| "ArrowStreamBatch.Reset", | |
| "Connector.Connect", | |
| "DSN", | |
| "DeregisterTLSConfig", | |
| "GetConfigFromEnv", | |
| "GetFromEnv", | |
| "Location", | |
| "LocationWithOffsetString", | |
| "NewUUID", | |
| "ParseDSN", | |
| "RegisterTLSConfig", | |
| "ScanSnowflakeParameter", | |
| "SnowflakeDriver.Open", | |
| "SnowflakeDriver.OpenConnector", | |
| "SnowflakeDriver.OpenWithConfig", | |
| "StartOCSPCacheClearer", | |
| "StopOCSPCacheClearer", | |
| "UUID.String", | |
| "cancelQuery", | |
| "cancelableStream.Close", | |
| "cancelableStream.Read", | |
| "closeSession", | |
| "downloadChunkHelper", | |
| "encryptionWrapper.UnmarshalJSON", | |
| "getSSO", | |
| "heartbeat.heartbeatMain", | |
| "httpClient.Get", | |
| "httpClient.Post", | |
| "largeResultSetReader.Read", | |
| "miniCoreError.Error", | |
| "postAuth", | |
| "postAuthOKTA", | |
| "postRestfulQueryHelper", | |
| "renewRestfulSession", | |
| "snowflakeArrowStreamChunkDownloader.GetBatches", | |
| "snowflakeArrowStreamChunkDownloader.Location", | |
| "snowflakeArrowStreamChunkDownloader.NextResultSet", | |
| "snowflakeConn.AddTelemetryData", | |
| "snowflakeConn.Begin", | |
| "snowflakeConn.BeginTx", | |
| "snowflakeConn.Close", | |
| "snowflakeConn.Exec", | |
| "snowflakeConn.ExecContext", | |
| "snowflakeConn.GetQueryStatus", | |
| "snowflakeConn.Ping", | |
| "snowflakeConn.Prepare", | |
| "snowflakeConn.PrepareContext", | |
| "snowflakeConn.Query", | |
| "snowflakeConn.QueryArrowStream", | |
| "snowflakeConn.QueryContext", | |
| "snowflakeRows.Close", | |
| "snowflakeRows.ColumnTypeDatabaseTypeName", | |
| "snowflakeRows.ColumnTypeScanType", | |
| "snowflakeRows.Columns", | |
| "snowflakeRows.GetArrowBatches", | |
| "snowflakeRows.HasNextResultSet", | |
| "snowflakeRows.Next", | |
| "snowflakeRows.NextResultSet", | |
| "snowflakeStmt.Close", | |
| "snowflakeStmt.Exec", | |
| "snowflakeStmt.ExecContext", | |
| "snowflakeStmt.NumInput", | |
| "snowflakeStmt.Query", | |
| "snowflakeStmt.QueryContext", | |
| "snowflakeTx.Commit", | |
| "snowflakeTx.Rollback", | |
| "streamWrapReader.Close", | |
| "structuredObjectWriterContext.WriteAll", | |
| "structuredObjectWriterContext.WriteNullRaw", | |
| "structuredObjectWriterContext.WriteNullTime", | |
| "structuredObjectWriterContext.WriteNullableStruct", | |
| "structuredObjectWriterContext.WriteRaw", | |
| "structuredObjectWriterContext.WriteStruct", | |
| "structuredObjectWriterContext.WriteTime", | |
| "structuredType.GetBigFloat", | |
| "structuredType.GetBigInt", | |
| "structuredType.GetBool", | |
| "structuredType.GetByte", | |
| "structuredType.GetBytes", | |
| "structuredType.GetFloat32", | |
| "structuredType.GetFloat64", | |
| "structuredType.GetInt16", | |
| "structuredType.GetInt32", | |
| "structuredType.GetInt64", | |
| "structuredType.GetNullBool", | |
| "structuredType.GetNullByte", | |
| "structuredType.GetNullFloat64", | |
| "structuredType.GetNullInt16", | |
| "structuredType.GetNullInt32", | |
| "structuredType.GetNullInt64", | |
| "structuredType.GetNullString", | |
| "structuredType.GetNullTime", | |
| "structuredType.GetString", | |
| "structuredType.GetStruct", | |
| "structuredType.GetTime", | |
| "structuredType.ScanTo", | |
| "transportConfig.String" | |
| ] | |
| }, | |
| { | |
| "path": "github.com/snowflakedb/gosnowflake/v2/internal/config", | |
| "symbols": [ | |
| "DSN", | |
| "DeregisterTLSConfig", | |
| "FillMissingConfigParameters", | |
| "GetToken", | |
| "HandleSingleParam", | |
| "LoadConnectionConfig", | |
| "ParseDSN", | |
| "ParseToml", | |
| "ReadToken", | |
| "RegisterTLSConfig", | |
| "ValidateFilePermission", | |
| "checkParsingError" | |
| ] | |
| }, | |
| { | |
| "path": "github.com/snowflakedb/gosnowflake/v2/internal/logger", | |
| "symbols": [ | |
| "MaskSecrets", | |
| "Proxy.Debug", | |
| "Proxy.Debugf", | |
| "Proxy.Error", | |
| "Proxy.Errorf", | |
| "Proxy.Fatal", | |
| "Proxy.Fatalf", | |
| "Proxy.Info", | |
| "Proxy.Infof", | |
| "Proxy.Trace", | |
| "Proxy.Tracef", | |
| "Proxy.Warn", | |
| "Proxy.Warnf", | |
| "Proxy.WithContext", | |
| "Proxy.WithField", | |
| "Proxy.WithFields", | |
| "levelFilteringEntry.Debug", | |
| "levelFilteringEntry.Debugf", | |
| "levelFilteringEntry.Error", | |
| "levelFilteringEntry.Errorf", | |
| "levelFilteringEntry.Fatal", | |
| "levelFilteringEntry.Fatalf", | |
| "levelFilteringEntry.Info", | |
| "levelFilteringEntry.Infof", | |
| "levelFilteringEntry.Trace", | |
| "levelFilteringEntry.Tracef", | |
| "levelFilteringEntry.Warn", | |
| "levelFilteringEntry.Warnf", | |
| "levelFilteringLogger.Debug", | |
| "levelFilteringLogger.Debugf", | |
| "levelFilteringLogger.Error", | |
| "levelFilteringLogger.Errorf", | |
| "levelFilteringLogger.Fatal", | |
| "levelFilteringLogger.Fatalf", | |
| "levelFilteringLogger.Info", | |
| "levelFilteringLogger.Infof", | |
| "levelFilteringLogger.Trace", | |
| "levelFilteringLogger.Tracef", | |
| "levelFilteringLogger.Warn", | |
| "levelFilteringLogger.Warnf", | |
| "levelFilteringLogger.WithContext", | |
| "levelFilteringLogger.WithField", | |
| "levelFilteringLogger.WithFields", | |
| "rawLogger.WithContext", | |
| "secretMaskingEntry.Debug", | |
| "secretMaskingEntry.Debugf", | |
| "secretMaskingEntry.Error", | |
| "secretMaskingEntry.Errorf", | |
| "secretMaskingEntry.Fatal", | |
| "secretMaskingEntry.Fatalf", | |
| "secretMaskingEntry.Info", | |
| "secretMaskingEntry.Infof", | |
| "secretMaskingEntry.Trace", | |
| "secretMaskingEntry.Tracef", | |
| "secretMaskingEntry.Warn", | |
| "secretMaskingEntry.Warnf", | |
| "secretMaskingLogger.Debug", | |
| "secretMaskingLogger.Debugf", | |
| "secretMaskingLogger.Error", | |
| "secretMaskingLogger.Errorf", | |
| "secretMaskingLogger.Fatal", | |
| "secretMaskingLogger.Fatalf", | |
| "secretMaskingLogger.Info", | |
| "secretMaskingLogger.Infof", | |
| "secretMaskingLogger.Trace", | |
| "secretMaskingLogger.Tracef", | |
| "secretMaskingLogger.Warn", | |
| "secretMaskingLogger.Warnf", | |
| "secretMaskingLogger.WithContext", | |
| "secretMaskingLogger.WithField", | |
| "secretMaskingLogger.WithFields" | |
| ] | |
| } | |
| ] | |
| } | |
| } | |
| ], | |
| "references": [ | |
| { | |
| "type": "ADVISORY", | |
| "url": "https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6" | |
| }, | |
| { | |
| "type": "FIX", | |
| "url": "https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a" | |
| }, | |
| { | |
| "type": "FIX", | |
| "url": "https://github.com/snowflakedb/gosnowflake/pull/1844" | |
| }, | |
| { | |
| "type": "WEB", | |
| "url": "https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026" | |
| } | |
| ], | |
| "database_specific": { | |
| "url": "https://pkg.go.dev/vuln/GO-2026-6665", | |
| "review_status": "REVIEWED" | |
| } | |
| } |