Is CVE-2025-50213 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apache Software Foundation Airflow Providers Snowflake

CVE-2025-50213

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake. This issue affects Apache Airflow Providers Snowflake: before 6.4.0. Sanitation of table and sta…

EPSS: 0.005 (65.8th percentile) — read the EPSS interpretation.

Affected products

Apache Software Foundation Airflow Providers Snowflake — versions 0

Weakness classification (CWE)

CWE-75

Public proof-of-concept exploits

nhienit2010/nhienit2010

References

github.com/apache/airflow/pull/51734 (patch)
lists.apache.org/thread/2kqfmyt2pghg5f6797g8hzvq331v8qx3 (vendor-advisory)

Frequently asked questions

What is CVE-2025-50213?: CVE-2025-50213 is a vulnerability in Apache Software Foundation Airflow Providers Snowflake, classified under CWE-75. Published 2025-06-24.
Is CVE-2025-50213 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.