Aller au contenu
en Se connecter
8.6 Élevée

CVE-2026-2472 Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK…

Description

Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but not including) 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment via injecting script escape sequences into model evaluation results or dataset JSON data.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift AI 2.25 1775144403 premières → < 1775144403 1775144403
Vertex AI SDK for Python 1.98 1.98.0 → < 1.131.0 1.131.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift AI 2.25

Les 140 CVE de Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Moyenne CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 Élevée CVE-2026-18618 A flaw was found in ml-metadata 7.5 Élevée CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 Élevée
Suivre cette CVE