{"action":"Upgrade Snowflake.Data to 2.1.5 or later.","affected":[{"fixed":"2.1.5","introduced":"2.0.25"}],"component":"Snowflake.Data","cve_ids":["CVE-2023-51662"],"ecosystem":"NuGet","epss":0.00348,"exploited":false,"fixed_versions":["2.1.5"],"ghsa_id":"GHSA-hwcc-4cv8-cf3h","id":"tcs_01M5N8RD956Y32ZZHXNRNH7WTZ","modified_at":"2024-02-16T08:22:27.600092Z","published_at":"2023-12-22T19:51:09Z","references":["https://osv.dev/vulnerability/GHSA-hwcc-4cv8-cf3h","https://github.com/snowflakedb/snowflake-connector-net/security/advisories/GHSA-hwcc-4cv8-cf3h","https://nvd.nist.gov/vuln/detail/CVE-2023-51662","https://github.com/snowflakedb/snowflake-connector-net/commit/49cb77ddd6e18c110eca35aa580e89d73c46cc33","https://docs.snowflake.com/release-notes/clients-drivers/dotnet-2023#version-2-1-5-december-18-2023","https://github.com/snowflakedb/snowflake-connector-net"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-hwcc-4cv8-cf3h","url":"https://osv.dev/vulnerability/GHSA-hwcc-4cv8-cf3h"}],"summary":"Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)"}