{"id":"GO-2026-6665","summary":"Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake","details":"Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake","aliases":["CVE-2026-86597","GHSA-qqj6-54q6-cxv6"],"modified":"2026-10-07T17:45:14.480396837Z","published":"2026-10-07T14:10:51Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-6665"},"references":[{"type":"ADVISORY","url":"https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-qqj6-54q6-cxv6"},{"type":"FIX","url":"https://github.com/snowflakedb/gosnowflake/commit/52e397ecd02f741dda99994fad9d42154149ef6a"},{"type":"FIX","url":"https://github.com/snowflakedb/gosnowflake/pull/1844"},{"type":"WEB","url":"https://docs.snowflake.com/en/release-notes/clients-drivers/golang-2026#version-220-sep-03-2026"}],"affected":[{"package":{"name":"github.com/snowflakedb/gosnowflake","ecosystem":"Go","purl":"pkg:golang/github.com/snowflakedb/gosnowflake"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"ecosystem_specific":{"imports":[{"symbols":["Array","ArrowBatch.ArrowSnowflakeTimestampToTime","ArrowBatch.Fetch","ArrowStreamBatch.GetStream","CertRevocationCheckMode.String","Connector.Connect","DSN","DeregisterTLSConfig","GetConfigFromEnv","GetFromEnv","Location","LocationWithOffsetString","NewUUID","ParseDSN","RegisterTLSConfig","SFCallerPrettyfier","ScanSnowflakeParameter","SnowflakeDriver.Open","SnowflakeDriver.OpenConnector","SnowflakeDriver.OpenWithConfig","SnowflakeError.Error","StartOCSPCacheClearer","UUID.String","cancelQuery","checkParsingError","closeSession","defaultLogger.CloseFileOnLoggerReplace","defaultLogger.Debug","defaultLogger.DebugFn","defaultLogger.Debugf","defaultLogger.Debugln","defaultLogger.Error","defaultLogger.ErrorFn","defaultLogger.Errorf","defaultLogger.Errorln","defaultLogger.Exit","defaultLogger.Fatal","defaultLogger.FatalFn","defaultLogger.Fatalf","defaultLogger.Fatalln","defaultLogger.GetLogLevel","defaultLogger.Info","defaultLogger.InfoFn","defaultLogger.Infof","defaultLogger.Infoln","defaultLogger.Log","defaultLogger.LogFn","defaultLogger.Logf","defaultLogger.Logln","defaultLogger.Panic","defaultLogger.PanicFn","defaultLogger.Panicf","defaultLogger.Panicln","defaultLogger.Print","defaultLogger.PrintFn","defaultLogger.Printf","defaultLogger.Println","defaultLogger.Replace","defaultLogger.SetLogLevel","defaultLogger.Trace","defaultLogger.TraceFn","defaultLogger.Tracef","defaultLogger.Traceln","defaultLogger.Warn","defaultLogger.WarnFn","defaultLogger.Warnf","defaultLogger.Warning","defaultLogger.WarningFn","defaultLogger.Warningf","defaultLogger.Warningln","defaultLogger.Warnln","defaultLogger.WithContext","defaultLogger.WithError","defaultLogger.WithField","defaultLogger.WithFields","defaultLogger.WithTime","downloadChunkHelper","encryptionWrapper.UnmarshalJSON","getSSO","heartbeat.heartbeatMain","httpClient.Get","httpClient.Post","largeResultSetReader.Read","maskSecrets","miniCoreError.Error","postAuth","postAuthOKTA","postRestfulQueryHelper","renewRestfulSession","secretmasker.maskConnectionToken","secretmasker.maskSasToken","sfTextFormatter.Format","snowflakeArrowStreamChunkDownloader.GetBatches","snowflakeArrowStreamChunkDownloader.Location","snowflakeArrowStreamChunkDownloader.NextResultSet","snowflakeConn.AddTelemetryData","snowflakeConn.Begin","snowflakeConn.BeginTx","snowflakeConn.Close","snowflakeConn.Exec","snowflakeConn.ExecContext","snowflakeConn.GetQueryStatus","snowflakeConn.Ping","snowflakeConn.Prepare","snowflakeConn.PrepareContext","snowflakeConn.Query","snowflakeConn.QueryArrowStream","snowflakeConn.QueryContext","snowflakeRows.Close","snowflakeRows.ColumnTypeDatabaseTypeName","snowflakeRows.ColumnTypeScanType","snowflakeRows.Columns","snowflakeRows.GetArrowBatches","snowflakeRows.HasNextResultSet","snowflakeRows.Next","snowflakeRows.NextResultSet","snowflakeStmt.Close","snowflakeStmt.Exec","snowflakeStmt.ExecContext","snowflakeStmt.NumInput","snowflakeStmt.Query","snowflakeStmt.QueryContext","snowflakeTx.Commit","snowflakeTx.Rollback","structuredObjectWriterContext.WriteAll","structuredObjectWriterContext.WriteNullRaw","structuredObjectWriterContext.WriteNullTime","structuredObjectWriterContext.WriteNullableStruct","structuredObjectWriterContext.WriteRaw","structuredObjectWriterContext.WriteStruct","structuredObjectWriterContext.WriteTime","structuredType.GetBigFloat","structuredType.GetBigInt","structuredType.GetBool","structuredType.GetByte","structuredType.GetBytes","structuredType.GetFloat32","structuredType.GetFloat64","structuredType.GetInt16","structuredType.GetInt32","structuredType.GetInt64","structuredType.GetNullBool","structuredType.GetNullByte","structuredType.GetNullFloat64","structuredType.GetNullInt16","structuredType.GetNullInt32","structuredType.GetNullInt64","structuredType.GetNullString","structuredType.GetNullTime","structuredType.GetString","structuredType.GetStruct","structuredType.GetTime","structuredType.ScanTo","transportConfig.String","wrapReader.Close"],"path":"github.com/snowflakedb/gosnowflake"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6665.json"}},{"package":{"name":"github.com/snowflakedb/gosnowflake/v2","ecosystem":"Go","purl":"pkg:golang/github.com/snowflakedb/gosnowflake/v2"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.2.0"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/snowflakedb/gosnowflake/v2","symbols":["Array","ArrowStreamBatch.GetStream","ArrowStreamBatch.Reset","Connector.Connect","DSN","DeregisterTLSConfig","GetConfigFromEnv","GetFromEnv","Location","LocationWithOffsetString","NewUUID","ParseDSN","RegisterTLSConfig","ScanSnowflakeParameter","SnowflakeDriver.Open","SnowflakeDriver.OpenConnector","SnowflakeDriver.OpenWithConfig","StartOCSPCacheClearer","StopOCSPCacheClearer","UUID.String","cancelQuery","cancelableStream.Close","cancelableStream.Read","closeSession","downloadChunkHelper","encryptionWrapper.UnmarshalJSON","getSSO","heartbeat.heartbeatMain","httpClient.Get","httpClient.Post","largeResultSetReader.Read","miniCoreError.Error","postAuth","postAuthOKTA","postRestfulQueryHelper","renewRestfulSession","snowflakeArrowStreamChunkDownloader.GetBatches","snowflakeArrowStreamChunkDownloader.Location","snowflakeArrowStreamChunkDownloader.NextResultSet","snowflakeConn.AddTelemetryData","snowflakeConn.Begin","snowflakeConn.BeginTx","snowflakeConn.Close","snowflakeConn.Exec","snowflakeConn.ExecContext","snowflakeConn.GetQueryStatus","snowflakeConn.Ping","snowflakeConn.Prepare","snowflakeConn.PrepareContext","snowflakeConn.Query","snowflakeConn.QueryArrowStream","snowflakeConn.QueryContext","snowflakeRows.Close","snowflakeRows.ColumnTypeDatabaseTypeName","snowflakeRows.ColumnTypeScanType","snowflakeRows.Columns","snowflakeRows.GetArrowBatches","snowflakeRows.HasNextResultSet","snowflakeRows.Next","snowflakeRows.NextResultSet","snowflakeStmt.Close","snowflakeStmt.Exec","snowflakeStmt.ExecContext","snowflakeStmt.NumInput","snowflakeStmt.Query","snowflakeStmt.QueryContext","snowflakeTx.Commit","snowflakeTx.Rollback","streamWrapReader.Close","structuredObjectWriterContext.WriteAll","structuredObjectWriterContext.WriteNullRaw","structuredObjectWriterContext.WriteNullTime","structuredObjectWriterContext.WriteNullableStruct","structuredObjectWriterContext.WriteRaw","structuredObjectWriterContext.WriteStruct","structuredObjectWriterContext.WriteTime","structuredType.GetBigFloat","structuredType.GetBigInt","structuredType.GetBool","structuredType.GetByte","structuredType.GetBytes","structuredType.GetFloat32","structuredType.GetFloat64","structuredType.GetInt16","structuredType.GetInt32","structuredType.GetInt64","structuredType.GetNullBool","structuredType.GetNullByte","structuredType.GetNullFloat64","structuredType.GetNullInt16","structuredType.GetNullInt32","structuredType.GetNullInt64","structuredType.GetNullString","structuredType.GetNullTime","structuredType.GetString","structuredType.GetStruct","structuredType.GetTime","structuredType.ScanTo","transportConfig.String"]},{"path":"github.com/snowflakedb/gosnowflake/v2/internal/config","symbols":["DSN","DeregisterTLSConfig","FillMissingConfigParameters","GetToken","HandleSingleParam","LoadConnectionConfig","ParseDSN","ParseToml","ReadToken","RegisterTLSConfig","ValidateFilePermission","checkParsingError"]},{"path":"github.com/snowflakedb/gosnowflake/v2/internal/logger","symbols":["MaskSecrets","Proxy.Debug","Proxy.Debugf","Proxy.Error","Proxy.Errorf","Proxy.Fatal","Proxy.Fatalf","Proxy.Info","Proxy.Infof","Proxy.Trace","Proxy.Tracef","Proxy.Warn","Proxy.Warnf","Proxy.WithContext","Proxy.WithField","Proxy.WithFields","levelFilteringEntry.Debug","levelFilteringEntry.Debugf","levelFilteringEntry.Error","levelFilteringEntry.Errorf","levelFilteringEntry.Fatal","levelFilteringEntry.Fatalf","levelFilteringEntry.Info","levelFilteringEntry.Infof","levelFilteringEntry.Trace","levelFilteringEntry.Tracef","levelFilteringEntry.Warn","levelFilteringEntry.Warnf","levelFilteringLogger.Debug","levelFilteringLogger.Debugf","levelFilteringLogger.Error","levelFilteringLogger.Errorf","levelFilteringLogger.Fatal","levelFilteringLogger.Fatalf","levelFilteringLogger.Info","levelFilteringLogger.Infof","levelFilteringLogger.Trace","levelFilteringLogger.Tracef","levelFilteringLogger.Warn","levelFilteringLogger.Warnf","levelFilteringLogger.WithContext","levelFilteringLogger.WithField","levelFilteringLogger.WithFields","rawLogger.WithContext","secretMaskingEntry.Debug","secretMaskingEntry.Debugf","secretMaskingEntry.Error","secretMaskingEntry.Errorf","secretMaskingEntry.Fatal","secretMaskingEntry.Fatalf","secretMaskingEntry.Info","secretMaskingEntry.Infof","secretMaskingEntry.Trace","secretMaskingEntry.Tracef","secretMaskingEntry.Warn","secretMaskingEntry.Warnf","secretMaskingLogger.Debug","secretMaskingLogger.Debugf","secretMaskingLogger.Error","secretMaskingLogger.Errorf","secretMaskingLogger.Fatal","secretMaskingLogger.Fatalf","secretMaskingLogger.Info","secretMaskingLogger.Infof","secretMaskingLogger.Trace","secretMaskingLogger.Tracef","secretMaskingLogger.Warn","secretMaskingLogger.Warnf","secretMaskingLogger.WithContext","secretMaskingLogger.WithField","secretMaskingLogger.WithFields"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6665.json"}}],"schema_version":"1.9.0"}