{"action":"Upgrade snowflake-sqlalchemy to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"1.1.6"}],"component":"snowflake-sqlalchemy","cve_ids":["CVE-2026-15736"],"ecosystem":"PyPI","epss":0.00377,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-8g6f-qw9x-4q6q","id":"tcs_01M5KH8KY2SHVKP755ME8PFW7H","modified_at":"2026-09-10T12:15:11.812939739Z","published_at":"2026-09-10T09:44:50.574404Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3921","https://nvd.nist.gov/vuln/detail/CVE-2026-15736","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/707","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/708","https://github.com/snowflakedb/snowflake-sqlalchemy/pull/710","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/2c33792c91449e746a2c7ef24c25f0ede0a4a875","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/35edf4dc5e76b9a9fdfa74c8e4f6fd14642110f1","https://github.com/snowflakedb/snowflake-sqlalchemy/commit/a198ed2197bb3e0be57268032ed6e8b7fdeb8129","https://github.com/snowflakedb/snowflake-sqlalchemy","https://github.com/snowflakedb/snowflake-sqlalchemy/releases","https://github.com/snowflakedb/snowflake-sqlalchemy/releases/tag/v1.11.0","https://pypi.org/project/snowflake-sqlalchemy","https://github.com/advisories/GHSA-8g6f-qw9x-4q6q"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-3921","url":"https://osv.dev/vulnerability/PYSEC-2026-3921"}],"summary":"Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities"}