Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Researchers at Wiz discovered a GitHub Actions workflow injection vulnerability in Snowflake's snowflakedb/snowflake-connector-net repository. An attacker could craft a GitHub issue to inject malicious code into a workflow, potentially exposing Jira credentials and gaining access to Snowflake Jira projects. Snowflake p…