adk-mongodb-session (0.1.0), adkgc (0.0.1) +158 more potentially affected by CVE-2026-19407 via google-cloud-aiplatform (>=1.14.0, <=1.154.0)

google-cloud-aiplatform PYPI version =1.14.0, =0.1.0, =0.0.2, =1.0.0, =0.1.3, =2.3.1, =0.5.0b2, =0.2.9b1, =0.0.3, =0.0.4 and more Source cves: CVE-2026-19407 Source advisory: MEND:CVE-2026-19407...

adkgc (0.0.1), airflow-add-ons (>=0.2.9b1, <=0.2.9b2) +14 more potentially affected by CVE-2026-2472 via google-cloud-aiplatform (>=1.98.0, <=1.130.0)

google-cloud-aiplatform PYPI version =1.98.0, =0.2.9b1, =6.4.0rc2, =0.1.23, =5.4.281, =0.0.4, =0.0.4.dev3, =1.0.2, =1.0.25122300, =0.2.1, =0.0.1.dev7, =0.0.1.dev8 - ragforge 0.1.0 and more Source cves: CVE-2026-2472 Source advisory: OSV:PYSEC-2026-2499...

adkgc (0.0.1), airflow-add-ons (>=0.2.9b1, <=0.2.9b2) +14 more potentially affected by CVE-2026-2472 via google-cloud-aiplatform (>=1.98.0, <=1.130.0)

google-cloud-aiplatform PYPI version =1.98.0, =0.2.9b1, =6.4.0rc2, =0.1.23, =5.4.281, =0.0.4, =0.0.4.dev3, =1.0.2, =1.0.25122300, =0.2.1, =0.0.1.dev7, =0.0.1.dev8 - ragforge 0.1.0 and more Source cves: CVE-2026-2472 Source advisory: OSV:GHSA-QV8J-HGPC-VRQ8...

adkgc (0.0.1), airflow-add-ons (>=0.2.9b1, <=0.2.9b2) +14 more potentially affected by CVE-2026-2472 via google-cloud-aiplatform (>=1.98.0, <=1.130.0)

google-cloud-aiplatform PYPI version =1.98.0, =0.2.9b1, =6.4.0rc2, =0.1.23, =5.4.281, =0.0.4, =0.0.4.dev3, =1.0.2, =1.0.25122300, =0.2.1, =0.0.1.dev7, =0.0.1.dev8 - ragforge 0.1.0 and more Source cves: CVE-2026-2472 Source advisory: SNYK:PYTHON-GOOGLECLOUDAIPLATFORM-15338245...

adkgc (0.0.1), airflow-add-ons (>=0.2.9b1, <=0.2.9b2) +14 more potentially affected by CVE-2026-2472 via google-cloud-aiplatform (>=1.98.0, <=1.130.0)

google-cloud-aiplatform PYPI version =1.98.0, =0.2.9b1, =6.4.0rc2, =0.1.23, =5.4.281, =0.0.4, =0.0.4.dev3, =1.0.2, =1.0.25122300, =0.2.1, =0.0.1.dev7, =0.0.1.dev8 - ragforge 0.1.0 and more Source cves: CVE-2026-2472 Source advisory: GHSA-QV8J-HGPC-VRQ8...

adkgc (0.0.1), airflow-add-ons (>=0.2.9b1, <=0.2.9b2) +14 more potentially affected by CVE-2026-2472 via google-cloud-aiplatform (>=1.98.0, <=1.130.0)

google-cloud-aiplatform PYPI version =1.98.0, =0.2.9b1, =6.4.0rc2, =0.1.23, =5.4.281, =0.0.4, =0.0.4.dev3, =1.0.2, =1.0.25122300, =0.2.1, =0.0.1.dev7, =0.0.1.dev8 - ragforge 0.1.0 and more Source cves: CVE-2026-2472 Source advisory: MEND:CVE-2026-2472...

CVE-2026-2472: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...