google-cloud-aiplatform vulnerabilities (PyPI)

2 vulnerabilities.

• google-cloud-aiplatform PyPI Bucket Squatting in Vertex AI Experiments leads to RCE and Model Theft. CVE-2026-2473 Fix available 7.7 HighFebruary 20, 2026
• google-cloud-aiplatform PyPI Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization CVE-2026-2472 Public exploitFix available 8.6 HighFebruary 20, 2026