Cross-site Scripting (XSS)

Overview google-cloud-aiplatform is a Vertex AI API client library Affected versions of this package are vulnerable to Cross-site Scripting XSS via the genai/evalsvisualization component. An attacker can execute arbitrary JavaScript code in a victim's Jupyter or Colab environment by injecting...

Google Cloud Vertex AI SDK 安全漏洞

Google Cloud Vertex AI SDK is a Python library for AI capabilities provided by Google, Inc. Versions of Google Cloud Vertex AI SDK prior to 1.131.0 contained security vulnerabilities. These vulnerabilities were due to the genai/evalsvisualization component, which had a storage-oriented cross-site...