GHSA-wh2j-26j7-9728
NoneCVSS
—
EPSS
—
Published
Feb 20, 2026
CISA due date
—
The record
Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | google-cloud-aiplatform | 1.21.0 | 1.133.0 |
Related vulnerabilities
- CVE-2026-2473 Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version… Same vulnerability
- GHSA-qv8j-hgpc-vrq8 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) Also affects google-cloud-aiplatform
- CVE-2026-2472 Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google… Also affects google-cloud-aiplatform
- CVE-2026-64964 ATutor generates predictable email confirmation tokens due to the use of insufficiently… CWE-340
- CVE-2026-9219 Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior have a… CWE-340
- CVE-2026-11374 In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit… CWE-340
- CVE-2026-9733 Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure… CWE-340
- CVE-2026-9692 Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids… CWE-340