Lucene search
+L

3 matches found

osv_pysec
osv_pysec
•added 2026/07/13 2:36 p.m.•24 views

PYSEC-2026-2499 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...

8.6CVSS8.6AI score0.00608EPSS
SaveExploits2References8
Rows per page
Query Builder