PYSEC-2025-51

vendorUSosv

view advisory published 2025-06-24Licence: CC-BY-4.0

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and stage parameters were added in CopyFromExternalStageToSnowflakeOperator to prevent SQL injection Users are recommended to upgrade to version 6.4.0, which fixes the issue.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-50213US	—	0.77% (56th)	—	2025-06-24
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Prov…

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-9r64-3wmc-x8m8ADVISORY
https://github.com/apache/airflow/pull/51734WEB
https://lists.apache.org/thread/2kqfmyt2pghg5f6797g8hzvq331v8qx3WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan