Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) Affecting apache-airflow-providers-snowflake package, versions [,6.4.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-PYTHON-APACHEAIRFLOWPROVIDERSSNOWFLAKE-10495510
- published24 Jun 2025
- disclosed24 Jun 2025
- creditNhien Pham
Introduced: 24 Jun 2025
NewCVE-2025-50213 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade apache-airflow-providers-snowflake to version 6.4.0 or higher.
Overview
apache-airflow-providers-snowflake is a Provider package apache-airflow-providers-snowflake for Apache Airflow
Affected versions of this package are vulnerable to Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in the CopyFromExternalStageToSnowflakeOperator function. An attacker can execute arbitrary SQL commands by injecting malicious input into the table or stage parameters.