{"action":"Upgrade snowflake-sqlalchemy to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"1.1.6"}],"component":"snowflake-sqlalchemy","cve_ids":["CVE-2026-15736"],"ecosystem":"PyPI","epss":0.00377,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-8g6f-qw9x-4q6q","id":"tcs_01M5KF86WVKDGMC75NM8WT4J95","modified_at":"2026-09-10T12:25:54.503244073Z","published_at":"2026-07-14T15:32:17Z","references":["https://osv.dev/vulnerability/GHSA-8g6f-qw9x-4q6q","https://nvd.nist.gov/vuln/detail/CVE-2026-15736","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/707","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/708","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/710","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/2c33792c91449e746a2c7ef24c25f0ede0a4a875","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/35edf4dc5e76b9a9fdfa74c8e4f6fd14642110f1","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/a198ed2197bb3e0be57268032ed6e8b7fdeb8129","https://github.com/snowflakedb/snowflake-sqlalchemy","https://github.com/snowflakedb/snowflake-sqlalchemy/releases","https://github.com/snowflakedb/snowflake-sqlalchemy/releases/tag/v1.11.0"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-8g6f-qw9x-4q6q","url":"https://osv.dev/vulnerability/GHSA-8g6f-qw9x-4q6q"}],"summary":"Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities"}