https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:54:05.344216+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-05989 cnvd-2025-05989 2026-10-09T03:54:05.347038+00:00 cnvd-2025-05989 https://cve.radiocsirt.org/vuln/euvd-2026-212703 EUVD-2026-212703 2026-10-09T03:54:05.347073+00:00 EUVD-2026-212703 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12236 fkie_cve-2024-12236 2026-10-09T03:54:05.347087+00:00

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC.

No further fix actions are needed. Google Cloud Platform implemented a fix to return an error message when a media file URL is specified in the fileUri parameter and VPC Service Controls is enabled. Other use cases are unaffected.

 https://cve.radiocsirt.org/vuln/ghsa-3vm2-3vf9-9j39 GHSA-3vm2-3vf9-9j39 2026-10-09T03:54:05.347119+00:00

A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC.

No further fix actions are needed. Google Cloud Platform implemented a fix to return an error message when a media file URL is specified in the fileUri parameter and VPC Service Controls is enabled. Other use cases are unaffected.