StackRadarChart IndexLive demo

CVE-2025-24789

High

Advisory

Published 29 Jan 2025In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.003; 17th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 82; of 17,781 indexed, latest versions
Container images: 4; deployed by those charts
Fix available: 1 of 1; affected package

Snowflake JDBC allows an untrusted search path on Windows

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 4 images.

Affected package	Affected versions	Fixed in	Images
snowflake-jdbcmaven	3.11.1, 3.13.22, 3.13.30	3.22.0	4

OSV records: GHSA-7hpq-3g6w-pvhf

Charts affected

82 by stars

Chart

Latest

Affected images

Radar Score

pagesalstom-pages-app

1 of 3 See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesandrei-pages

1 of 3 See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesberrutig-pages

1 of 3 See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesbrian-pages

1 of 3 See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesbrixton-mayuribhavsar23-pages

1 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesbrixton-pages

1 of 3 See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagescamden-pages

1 of 3 See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagescarina-pages

1 of 3 See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagescarmel-pages-dell

1 of 3 See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagescrypticcode-helmchart

1 of 3 See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesdalston-pages

1 of 3 See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesdaman-dell-kuber

1 of 3 See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesdavid-pages

1 of 3 See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesdebasish-pages

1 of 3 See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesdipak

1 of 3 See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesedgwarepages

1 of 3 See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

flywayeosc-lot-1

1 of 3 See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :9.15	45b5d7cdc75a	snowflake-jdbc@3.13.22	3.22.0

Open the chart page →

9,334

pagesgary-pages

1 of 3 See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pageshelm-chart-repos-camden

1 of 3 See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pageshelm-repo

1 of 3 See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

ikigaiikigai-chart

1 of 58 See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
dremio/dremio-oss :24.1.0	80ed2e3b7c43	snowflake-jdbc@3.13.30	3.22.0

Open the chart page →

37,671

pageslatif-pages

1 of 3 See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pageslavanya-pages

1 of 3 See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesliviu884422-pages

1 of 3 See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesmuthu-pages

1 of 3 See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesnarain

1 of 3 See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesnarasimha-pages

1 of 3 See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagesnavin-brixton

1 of 3 See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages

1 of 3 See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages10

1 of 3 See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages111

1 of 3 See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages2

1 of 3 See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-alexchmielu

1 of 3 See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-alps

1 of 3 See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-alstom

1 of 3 See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-ambala

1 of 3 See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-andromeda

1 of 3 See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespagesbadami

1 of 3 See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-blackburn

1 of 3 See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-botes

1 of 3 See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-brian

1 of 3 See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-buckll

1 of 3 See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-camden

1 of 3 See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-camden771

1 of 3 See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-diarmuidkeane

1 of 3 See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-draco

1 of 3 See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-ellora

1 of 3 See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-finchley

1 of 3 See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-fornax

1 of 3 See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

pagespages-harsh

1 of 3 See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24789.

Container image	Digest	Package	Fixed in
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0

Open the chart page →

20,190

Container images carrying it

4 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flyway/flyway :6.4.4	22d97ceb0c47	snowflake-jdbc@3.11.1	3.22.0	79
dremio/dremio-oss :24.1.0	80ed2e3b7c43	snowflake-jdbc@3.13.30	3.22.0	1
flyway/flyway :9.15	45b5d7cdc75a	snowflake-jdbc@3.13.22	3.22.0	1
flyway/flyway :9.14.1-alpine	80f12c80502b	snowflake-jdbc@3.13.22	3.22.0	1