LIVE · cybersecurity feed
Live wire

snowflake

snowflakehigh

Snowflake GitHub Actions Flaw Allows Command Injection

Researchers have identified a vulnerability in Snowflake's GitHub Actions workflows, specifically within the snowflakedb/snowflake-connector-net repository. A specially crafted GitHub issue could exploit this flaw to execute commands within a workflow, potentially exposing internal Jira credentials.