Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.3 views

PYSEC-2026-2499 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...

8.6CVSS7.2AI score0.00522EPSS
SaveExploits2References8
Rows per page
Query Builder