AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Google Cloud security advisories

21 advisories · 20 critical or high in 12 months · latest Oct 27

Advisories page

21 advisories

High 8.3Oct 27Google Cloud Compute Engine: missing authorizationCVE-2026-85299fixed in 2026-08-31High 7.7Oct 26Google Cloud Cloud Run MCP: code executionCVE-2026-85297fixed in 1.11.0Critical 9.4Sep 28Google Cloud Application Integration: unsafe deserializationCVE-2026-81867fixed in 2026-06-28High 8.3Sep 28A Confused Deputy vulnerability in the EmailTask component in Google Cloud...CVE-2026-81375fixed in 2026-06-30Critical 9.4Sep 28Google Cloud Application Integration: improper authorizationCVE-2026-19759fixed in 2026-06-17High 7.7Sep 15Google Cloud Gemini Enterprise Agent Platform SDK: remote code executionCVE-2026-19407fixed in 1.165.1High 8.7Sep 11Google Cloud Gemini Enterprise: server-side request forgeryCVE-2026-19486fixed in 2026-06-01High 7.7Sep 10Google Cloud Gemini CLI: code executionCVE-2026-13745fixed in 0.39.1Critical 10.0Sep 9Google Cloud Agent Development Kit (ADK) for Python: code injectionCVE-2026-79696fixed in 2.7.0High 8.7Sep 4Google Cloud Agent Development Kit (ADK): path traversalCVE-2026-79707fixed in 1.22.0High 8.5Sep 4Google Cloud Integration Connectors: missing authorizationCVE-2026-4644fixed in 2025-12-11Critical 9.4Aug 31Google Cloud Build: improper authorizationCVE-2026-19410fixed in 2026-06-24Critical 9.3Aug 26Google Cloud Vertex AI Search for Commerce: weak randomnessCVE-2026-19485fixed in 2026-04-27Critical 9.4Aug 26Google Cloud BigQuery Data Transfer Service: improper input validationCVE-2026-12717fixed in 2026-05-01Critical 9.3Aug 22Google Cloud Application Integration: missing authorizationCVE-2026-12710fixed in 2026-04-04Critical 9.4Aug 17Google SecOps (Chronicle SOAR): SQL injectionCVE-2026-15623fixed in 6.3.85Critical 9.4Aug 5Google SecOps (Chronicle SOAR): privilege escalationCVE-2026-15587fixed in 6.3.85High 8.7Jul 24Google Cloud Looker: cross-site scriptingCVE-2026-15810fixed in 25.6.103 +3High 8.5Jul 17Google Cloud Firebase Studio: missing authorizationCVE-2026-12715fixed in 2026-04-15Critical 9.4Jul 13Google Cloud BigQuery: missing authorizationCVE-2026-14934fixed in 2026-05-10 +2Medium 5.9Jul 9Google Cloud Apigee: improper input validationCVE-2026-12879fixed in 2026-06-12
About Google Cloud

Security advisories Google Cloud publishes for its own products.

cloud.google.com/support/bulletinsGoogle Cloud

Google Cloud elsewhere on Ibis: Paydays · Releases · Repos