Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-49700 State: PUBLISHED Published: 2025-01-21T13:40:33.411Z Last Updated: 2025-01-21T15:52:22.299Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: ARPrice Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ARPrice allows Reflected XSS. This issue affects ARPrice: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arprice/vulnerability/wordpress-arprice-plugin-4-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49701 State: PUBLISHED Published: 2024-10-23T15:15:21.749Z Last Updated: 2024-10-23T18:44:53.520Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Theme Horse Products: Mags Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Theme Horse Mags.This issue affects Mags: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mags/wordpress-mags-theme-1-1-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-49702 State: PUBLISHED Published: 2024-10-24T12:28:25.816Z Last Updated: 2024-10-24T13:41:34.695Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: myCRED Products: myCred Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in myCRED myCred Elementor allows Stored XSS.This issue affects myCred Elementor: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mycred-for-elementor/wordpress-mycred-elementor-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49703 State: PUBLISHED Published: 2024-10-24T12:11:18.395Z Last Updated: 2024-10-24T13:43:29.594Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MagePeople Team Products: Event Manager for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Event Manager for WooCommerce allows Stored XSS.This issue affects Event Manager for WooCommerce: from n/a through 4.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-wpevently-plugin-4-2-5-cross
ment: References: - https://patchstack.com/database/vulnerability/mage-eventpress/wordpress-wpevently-plugin-4-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-49704 State: PUBLISHED Published: 2024-12-10T13:53:54.522Z Last Updated: 2024-12-10T15:10:39.768Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Siemens Products: COMOS V10.3, COMOS V10.4.0, COMOS V10.4.1, COMOS V10.4.2, COMOS V10.4.3, COMOS V10.4.4, COMOS V10.4.4.1 Problem Types: CWE-611 Description: A vulnerability has been identified in COMOS V10.3 (All versions < V10.3.3.5.8), COMOS V10.4.0 (All versions), COMOS V10.4.1 (All versions), COMOS V10.4.2 (All versions), COMOS V10.4.3 (All versions < V10.4.3.0.47), COMOS V10.4.4 (All versions < V10.4.4.2), COMOS V10.4.4.1 (All versions < V10.4.4.1.21). The Generic Data Mapper, the Engineering
.4.4 (All versions < V10.4.4.2), COMOS V10.4.4.1 (All versions < V10.4.4.1.21). The Generic Data Mapper, the Engineering Adapter, and the Engineering Interface improperly handle XML External Entity (XXE) entries when parsing configuration and mapping files. This could allow an attacker to extract any file with a known location on the user's system or accessible network folders by persuading a user to use a maliciously crafted configuration or mapping file in one of the affected components. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-701627.html
CVE ID: CVE-2024-49705 State: PUBLISHED Published: 2025-04-14T12:05:35.366Z Last Updated: 2025-04-14T12:54:05.732Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-248 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks. An attacker might trick a user into using an URL with a d parameter set to an unhandled value. All the subsequent requests will not be accepted as the server returns an error message. Since this parameter is sent as part of a session cookie, the issue persists until the session expires or the user deletes cookies manually. Similar effect might be achieved when a user tries to change platform
ion expires or the user deletes cookies manually. Similar effect might be achieved when a user tries to change platform language to an unimplemented one. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-49706 State: PUBLISHED Published: 2025-04-14T12:05:50.974Z Last Updated: 2025-04-14T12:53:15.740Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-601 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-49707 State: PUBLISHED Published: 2025-04-14T12:06:08.154Z Last Updated: 2025-04-14T12:52:29.891Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for resetting user's password with a malicious script, what causes the script to run in user's context. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iks
es: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-49708 State: PUBLISHED Published: 2025-04-14T12:06:31.424Z Last Updated: 2025-04-14T12:47:46.967Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-79 Description: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris
- https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-49709 State: PUBLISHED Published: 2025-04-14T12:06:51.407Z Last Updated: 2025-04-14T12:45:01.014Z Vendors: SoftCOM Products: iKSORIS Problem Types: CWE-384 Description: Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value. An attacker with an access to user's browser might set such a cookie, wait until the user logs in and then use the same cookie to take over the account. Moreover, the system does not destroy the old sessions when creating new ones, what expands the time frame in which an attack might be performed. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: R
t be performed. This vulnerability has been patched in version 79.0 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/04/CVE-2024-10087 - https://www.iksoris.pl/system-rezerwacji-i-sprzedazy-biletow-iksoris.html
CVE ID: CVE-2024-49714 State: PUBLISHED Published: 2025-09-04T18:33:44.377Z Last Updated: 2025-09-06T03:55:54.859Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/6b669f231d0faf4658bb3ba6ea7f77d4d4a5e1b1 - https://source.android.com/security/bulletin/2025-09-01
CVE ID: CVE-2024-49720 State: PUBLISHED Published: 2025-09-02T22:11:04.547Z Last Updated: 2025-09-04T03:55:25.308Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Permission/+/e02775c62a81b99ba4cc693dd1885cc70c0bd5cf - https://source.a
roid.googlesource.com/platform/packages/modules/Permission/+/e02775c62a81b99ba4cc693dd1885cc70c0bd5cf - https://source.android.com/security/bulletin/2025-04-01
CVE ID: CVE-2024-49722 State: PUBLISHED Published: 2025-09-02T22:11:05.590Z Last Updated: 2025-09-03T15:52:54.084Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/8cba0e8bcfc291977f33f14fba0bd2b7f7fe8f6c - https://android.googlesource.com/platform/frameworks/base/+/2b4d66
rks/base/+/8cba0e8bcfc291977f33f14fba0bd2b7f7fe8f6c - https://android.googlesource.com/platform/frameworks/base/+/2b4d662a462c6b0269a6e6035ce443ec29fd860e - https://source.android.com/security/bulletin/2025-04-01
CVE ID: CVE-2024-49724 State: PUBLISHED Published: 2025-01-21T23:04:43.259Z Last Updated: 2025-03-24T17:39:38.396Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49728 State: PUBLISHED Published: 2025-09-02T22:11:06.608Z Last Updated: 2025-09-03T15:52:39.443Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/modules/Bluetooth/+/4b65cbb339db4d3a7a9a6100cb2e7c9f1ece9271 - https://source.android.com/security/bulletin/202
packages/modules/Bluetooth/+/4b65cbb339db4d3a7a9a6100cb2e7c9f1ece9271 - https://source.android.com/security/bulletin/2025-04-01
CVE ID: CVE-2024-49730 State: PUBLISHED Published: 2025-09-02T22:11:07.640Z Last Updated: 2025-09-04T03:55:24.178Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In FuseDaemon.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/packages/providers/MediaProvider/+/961c8cbd2a489277876aeffa40ebdee5eae29f1f - https://source.android.com/security/bulletin/2025-04-01
CVE ID: CVE-2024-49731 State: PUBLISHED Published: 2025-09-04T19:18:59.502Z Last Updated: 2025-09-09T03:55:13.748Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/wear/2025-02-01
CVE ID: CVE-2024-49732 State: PUBLISHED Published: 2025-01-21T23:04:43.353Z Last Updated: 2025-03-13T20:27:04.708Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49733 State: PUBLISHED Published: 2025-01-21T23:04:43.453Z Last Updated: 2025-03-25T13:28:23.203Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49734 State: PUBLISHED Published: 2025-01-21T23:04:43.573Z Last Updated: 2025-03-24T16:17:55.482Z Vendors: Google Products: Android Problem Types: Information disclosure Description: In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49735 State: PUBLISHED Published: 2025-01-21T23:04:43.717Z Last Updated: 2025-03-19T20:46:27.145Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49736 State: PUBLISHED Published: 2025-01-21T23:04:43.820Z Last Updated: 2025-03-24T15:43:38.145Z Vendors: Google Products: Android Problem Types: Denial of service Description: In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49737 State: PUBLISHED Published: 2025-01-21T23:04:43.896Z Last Updated: 2025-03-18T14:59:29.242Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49738 State: PUBLISHED Published: 2025-01-21T23:04:43.976Z Last Updated: 2025-03-19T14:23:55.414Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49739 State: PUBLISHED Published: 2025-09-04T17:11:40.123Z Last Updated: 2025-09-09T03:55:14.913Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-05-01
CVE ID: CVE-2024-49740 State: PUBLISHED Published: 2025-08-26T22:48:34.573Z Last Updated: 2025-08-27T13:57:26.530Z Vendors: Google Products: Android Problem Types: Denial of service Description: In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://android.googlesource.com/platform/frameworks/base/+/bcb1316835dc31f33f0c3b409ee847c389c09d2b - https://android.googlesource.com/platform/packages/services/Telephony/+/b1ab472f0f56146387d3822318394cb2525ad34c -
2b - https://android.googlesource.com/platform/packages/services/Telephony/+/b1ab472f0f56146387d3822318394cb2525ad34c - https://source.android.com/security/bulletin/2025-03-01
CVE ID: CVE-2024-49742 State: PUBLISHED Published: 2025-01-21T23:04:44.074Z Last Updated: 2025-03-13T13:43:47.005Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification access in Settings due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49744 State: PUBLISHED Published: 2025-01-21T23:04:44.166Z Last Updated: 2025-03-18T18:16:26.206Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49745 State: PUBLISHED Published: 2025-01-21T23:04:44.249Z Last Updated: 2025-02-18T19:47:42.996Z Vendors: Google Products: Android Problem Types: Elevation of privilege Description: In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49747 State: PUBLISHED Published: 2025-01-21T23:04:44.338Z Last Updated: 2025-03-18T14:30:00.882Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In gatts_process_read_by_type_req of gatt_sr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49748 State: PUBLISHED Published: 2025-01-21T23:04:44.424Z Last Updated: 2025-03-17T15:10:25.455Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In gatts_process_primary_service_req of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49749 State: PUBLISHED Published: 2025-01-21T23:04:44.500Z Last Updated: 2025-03-20T14:20:34.518Z Vendors: Google Products: Android Problem Types: Remote code execution Description: In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://source.android.com/security/bulletin/2025-01-01
CVE ID: CVE-2024-49750 State: PUBLISHED Published: 2024-10-24T22:03:06.539Z Last Updated: 2024-10-25T17:18:42.623Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: snowflakedb Products: snowflake-connector-python Problem Types: CWE-532 Description: The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the logging level was set by the user to DEBUG, the Connector could have logged Duo passcodes (when specified via the `passcode` parameter) and Azure SAS tokens. Additionally, the SecretDetector logging formatter, if enabled, con
via the `passcode` parameter) and Azure SAS tokens. Additionally, the SecretDetector logging formatter, if enabled, contained bugs which caused it to not fully redact JWT tokens and certain private key formats. Snowflake released version 3.12.3 of the Snowflake Connector for Python, which fixes the issue. In addition to upgrading, users should review their logs for any potentially sensitive information that may have been captured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/snowflakedb/snowflake-connector-python/security/advisories/GHSA-5vvg-pvhp-hv2m - https://github.com/snowflakedb/snowflake-connector-python/commit/dbc9284a3c0382c131b971b35e8d6ab93c