Power Query Vulnerability Disclosure

generated: '2026-08-29'
method: searched
probe: true
source: https://msrc.microsoft.com/.well-known/security.txt
provider: Power Query
providerId: power-query
description: >-
  Power Query is covered by the Microsoft Security Response Center (MSRC)
  coordinated vulnerability disclosure program and the Microsoft Bug Bounty
  Program. The RFC 9116 security.txt fetched from msrc.microsoft.com on
  2026-08-29 carries Contact, Policy, Acknowledgments, Encryption, Expires,
  Preferred-Languages and a CSAF publication feed.
security_txt:
  url: https://msrc.microsoft.com/.well-known/security.txt
  status: 200
  file: well-known/power-query-security.txt
  canonical: https://www.microsoft.com/.well-known/security.txt
  expires: '2026-09-23T16:00:00.000Z'
  preferred_languages: en
contact:
  - https://msrc.microsoft.com/report/vulnerability/new
policy:
  - https://www.microsoft.com/en-us/msrc/cvd
  - https://www.microsoft.com/en-us/msrc/bounty/
  - https://www.microsoft.com/en-us/msrc/bounty-safe-harbor
acknowledgments:
  - https://msrc.microsoft.com/update-guide/acknowledgement
encryption:
  - https://msrc.microsoft.com/.well-known/csaf/openpgp/998D7EC1A516E3D17FF90480EF148D3CDE714E0D.asc
advisories:
  csaf_provider_metadata: https://msrc.microsoft.com/csaf/provider-metadata.json
  format: CSAF 2.0
bug_bounty:
  program: Microsoft Bug Bounty Program
  url: https://www.microsoft.com/en-us/msrc/bounty/
  safe_harbor: https://www.microsoft.com/en-us/msrc/bounty-safe-harbor
  platform: self-hosted (MSRC Researcher Portal)
evidence:
  - source: https://msrc.microsoft.com/.well-known/security.txt
    kind: RFC 9116 security.txt
    status: 200
    fetched: '2026-08-29'
  - source: https://github.com/microsoft/DataConnectors/blob/master/SECURITY.md
    kind: repository security policy
    status: 200
    fetched: '2026-08-29'
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
    url: https://apievangelist.com