# google-cloud-aiplatform (PyPI) vulnerabilities

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Weekly downloads: 21.4M
- Dependents: 328
- Registry: https://pypi.org/project/google-cloud-aiplatform/

## Advisories (2)

### [CVE-2026-2473](https://cve.now/CVE-2026-2473): Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft.

- Severity: High 7.7
- Published: Feb 20, 2026
- Affected: from 1.21.0, fixed in 1.133.0.

### [CVE-2026-2472](https://cve.now/CVE-2026-2472): Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

- Severity: High 8.6
- Published: Feb 20, 2026
- Affected: from 1.98.0, fixed in 1.131.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/google-cloud-aiplatform
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.