Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:51:22 +0000 CVE-2026-2472 — Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization https://cve.radiocsirt.org/vuln/cve-2026-2472 <p><strong>Affected:</strong> Google Cloud Vertex AI SDK for Python, Red Hat OpenShift AI 2.25</p> <p>Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim&#39;s Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.</p> <p><strong>Affected:</strong> Google Cloud Vertex AI SDK for Python, Red Hat OpenShift AI 2.25</p> <p>Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim&#39;s Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.</p> https://cve.radiocsirt.org/vuln/cve-2026-2472 GHSA-qv8j-hgpc-vrq8 — Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) https://cve.radiocsirt.org/vuln/ghsa-qv8j-hgpc-vrq8 <p><strong>Affected:</strong> PyPI: google-cloud-aiplatform</p> <p>Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim&#39;s Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.</p> <p><strong>Affected:</strong> PyPI: google-cloud-aiplatform</p> <p>Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim&#39;s Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.</p> https://cve.radiocsirt.org/vuln/ghsa-qv8j-hgpc-vrq8