PyPI - OSV

PYSEC-2026-3714

PyPI/apache-airflow-providers-google

See record for full details 12 Aug

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-2500

PyPI/google-cloud-aiplatform

Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming 13 Jul

Fix available
Severity - 7.7 (High)

PYSEC-2026-2499

PyPI/google-cloud-aiplatform

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) 13 Jul

Fix available
Severity - 8.6 (High)

PYSEC-2026-774

PyPI/apache-airflow-providers-google

Apache Airflow Google Provider Improper Input Validation vulnerability 07 Jul

Fix available
Severity - 7.5 (High)

GHSA-v3mh-27qj-w836

PyPI/apache-airflow-providers-google

Apache Airflow Google provider allows path traversal through GCS object names 06 Jul

Fix available
Severity - 8.1 (High)

PYSEC-2026-2084

PyPI/apache-airflow-providers-google

See record for full details 06 Jul

Fix available
Severity - 8.1 (High)

PYSEC-2026-344

PyPI/google-adk

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability 29 Jun

Fix available
Severity - 9.3 (Critical)

PYSEC-2026-277

PyPI/apache-airflow-providers-google

Apache Airflow Google Provider Improper Input Validation vulnerability 29 Jun

Fix available
Severity - 9.8 (Critical)

GHSA-g9v5-gjwf-9rwx

PyPI/apache-airflow-providers-google

Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default 26 May

Fix available
Severity - 8.1 (High)

PYSEC-2026-166

PyPI/apache-airflow-providers-google

See record for full details 25 May

Fix available
Severity - 8.1 (High)

GHSA-rg7c-g689-fr3x

PyPI/google-adk

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability 13 Apr

Fix available
Severity - 9.3 (Critical)

GHSA-qv8j-hgpc-vrq8

PyPI/google-cloud-aiplatform

Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) 20 Feb

Fix available
Severity - 8.6 (High)

GHSA-wh2j-26j7-9728

PyPI/google-cloud-aiplatform

Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming 20 Feb

Fix available
Severity - 7.7 (High)

MAL-2026-874

PyPI/google-search-result

Malicious code in google-search-result (PyPI) 12 Feb

No fix available

MAL-2025-191741

PyPI/google-cloud-iam-credentials

Malicious code in google-cloud-iam-credentials (PyPI) 12 Nov 2025

No fix available

MAL-2024-12280

PyPI/google-play-store

Malicious code in google-play-store (PyPI) 01 Oct 2024

No fix available

Vulnerabilities