Overview

In file: init.py, __all__ includes an undefined symbol LegacyPandasError. This will cause an ImportError when importing the module using star import i.e. from google.cloud.bigquery import *.

Possible Fix

One possible fix is removing the undefined symbol if it is not needed.

--- /workspace/source/google/cloud/bigquery/__init__.py
+++ /workspace/source/google/cloud/bigquery/__init__.py
@@ -217,102 +217,9 @@
   # Custom exceptions
   "LegacyBigQueryStorageError",
   "LegacyPyarrowError",
-   "LegacyPandasError",
] 
 
 def load_ipython_extension(ipython):

Sponsorship and Support:

This work is done by the security researchers from OpenRefactory and is supported by the Open Source Security Foundation (OpenSSF): Project Alpha-Omega. Alpha-Omega is a project partnering with open source software project maintainers to systematically find new, as-yet-undiscovered vulnerabilities in open source code - and get them fixed - to improve global software supply chain security.

The bug is found by running the iCR tool by OpenRefactory, Inc. and then manually triaging the results.