Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4187
  • PyPI/apache-airflow-providers-google
 Apache Airflow's Google provider built Google Drive search expressions by... 29 Sep
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-3714
  • PyPI/apache-airflow-providers-google
 See record for full details 12 Aug
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2500
  • PyPI/google-cloud-aiplatform
 Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming 13 Jul
  • Fix available
  • Severity - 7.7 (High)
PYSEC-2026-2499
  • PyPI/google-cloud-aiplatform
 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-774
  • PyPI/apache-airflow-providers-google
 Apache Airflow Google Provider Improper Input Validation vulnerability 07 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-v3mh-27qj-w836
  • PyPI/apache-airflow-providers-google
 Apache Airflow Google provider allows path traversal through GCS object names 06 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2084
  • PyPI/apache-airflow-providers-google
 See record for full details 06 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-344
  • PyPI/google-adk
 Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-277
  • PyPI/apache-airflow-providers-google
 Apache Airflow Google Provider Improper Input Validation vulnerability 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-g9v5-gjwf-9rwx
  • PyPI/apache-airflow-providers-google
 Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default 26 May
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-166
  • PyPI/apache-airflow-providers-google
 See record for full details 25 May
  • Fix available
  • Severity - 8.1 (High)
GHSA-rg7c-g689-fr3x
  • PyPI/google-adk
 Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability 13 Apr
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-qv8j-hgpc-vrq8
  • PyPI/google-cloud-aiplatform
 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS) 20 Feb
  • Fix available
  • Severity - 8.6 (High)
GHSA-wh2j-26j7-9728
  • PyPI/google-cloud-aiplatform
 Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming 20 Feb
  • Fix available
  • Severity - 7.7 (High)
MAL-2026-874
  • PyPI/google-search-result
 Malicious code in google-search-result (PyPI) 12 Feb
  • No fix available
MAL-2025-191741
  • PyPI/google-cloud-iam-credentials
 Malicious code in google-cloud-iam-credentials (PyPI) 12 Nov 2025
  • No fix available
Load more...