{"data":{"ecosystem":"pypi","name":"google-cloud-aiplatform","url":"https://aisecwatch.com/packages/pypi/google-cloud-aiplatform","latestVersion":"2.4.0","firstReleaseAt":"2020-11-09T17:51:30.340Z","repository":"https://github.com/googleapis/python-aiplatform","llm":{"exposure":"direct","depth":0,"integratedAt":"2020-11-09T17:51:30.340Z","integratedVersion":"0.3.0","sdks":["vertexai"],"path":[]},"authority":{"profile":["execution","http"],"fromDependencies":["pypi:aiohttp","pypi:docker","pypi:httpx","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"autogen","versionSpec":"<1,>=0.14.1","scope":"extra:ag2"},{"ecosystem":"pypi","name":"google-adk","versionSpec":"<3.0.0,>=1.27.0","scope":"extra:adk"},{"ecosystem":"pypi","name":"google-genai","versionSpec":"<3.0.0,>=1.37.0","scope":"runtime"},{"ecosystem":"pypi","name":"langchain","versionSpec":"<2.0.0,>=1.0.0","scope":"extra:langchain"},{"ecosystem":"pypi","name":"langchain-classic","versionSpec":null,"scope":"extra:langchain"},{"ecosystem":"pypi","name":"langchain-core","versionSpec":"<2.0.0,>=1.0.0","scope":"extra:langchain"},{"ecosystem":"pypi","name":"langchain-google-genai","versionSpec":"<4.2.3,>=4.0.0","scope":"extra:langchain"},{"ecosystem":"pypi","name":"langgraph","versionSpec":"<2.0.0,>=1.0.0","scope":"extra:langchain"},{"ecosystem":"pypi","name":"litellm","versionSpec":"<1.97.0,>=1.93.0","scope":"extra:full"},{"ecosystem":"pypi","name":"lit-nlp","versionSpec":"==0.4.0","scope":"extra:full"},{"ecosystem":"pypi","name":"llama-index","versionSpec":null,"scope":"extra:llama-index"},{"ecosystem":"pypi","name":"llama-index-llms-google-genai","versionSpec":null,"scope":"extra:llama-index"},{"ecosystem":"pypi","name":"mlflow","versionSpec":">=1.27.0","scope":"extra:full"},{"ecosystem":"pypi","name":"openinference-instrumentation-autogen","versionSpec":"<0.2,>=0.1.6","scope":"extra:ag2"},{"ecosystem":"pypi","name":"openinference-instrumentation-langchain","versionSpec":"<0.2,>=0.1.19","scope":"extra:langchain"},{"ecosystem":"pypi","name":"openinference-instrumentation-llama-index","versionSpec":"<4.0,>=3.0","scope":"extra:llama-index"},{"ecosystem":"pypi","name":"opentelemetry-instrumentation-google-genai","versionSpec":"<1.0.0,>=0.3b0","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"bigframes","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"absl-py","versionSpec":null,"scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"certifi","versionSpec":">=2023.7.22","scope":"runtime"},{"ecosystem":"pypi","name":"cloudpickle","versionSpec":"<4.0,>=3.0","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"docker","versionSpec":">=5.0.3","scope":"extra:full"},{"ecosystem":"pypi","name":"docstring-parser","versionSpec":"<1","scope":"runtime"},{"ecosystem":"pypi","name":"explainable-ai-sdk","versionSpec":">=1.0.0","scope":"extra:full"},{"ecosystem":"pypi","name":"fastapi","versionSpec":"<=0.124.4,>=0.71.0","scope":"extra:full"},{"ecosystem":"pypi","name":"google-api-core","versionSpec":"!=2.0.*,!=2.1.*,!=2.2.*,!=2.3.*,!=2.4.*,!=2.5.*,!=2.6.*,!=2.7.*,<3.0.0,>=1.34.1","scope":"runtime"},{"ecosystem":"pypi","name":"google-auth","versionSpec":"<3.0.0,>=2.47.0","scope":"runtime"},{"ecosystem":"pypi","name":"google-cloud-bigquery","versionSpec":"!=3.20.0,<4.0.0,>=1.15.0","scope":"runtime"},{"ecosystem":"pypi","name":"google-cloud-bigquery-storage","versionSpec":null,"scope":"extra:full"},{"ecosystem":"pypi","name":"google-cloud-logging","versionSpec":"<4","scope":"extra:agent-engines"},{"ecosystem":"pypi","name":"google-cloud-resource-manager","versionSpec":"<3.0.0,>=1.3.3","scope":"runtime"},{"ecosystem":"pypi","name":"google-cloud-storage","versionSpec":"<4.0.0,>=1.32.0","scope":"runtime"},{"ecosystem":"pypi","name":"google-vizier","versionSpec":">=0.1.6","scope":"extra:full"},{"ecosystem":"pypi","name":"grpcio-testing","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"grpcio-tools","versionSpec":">=1.63.0","scope":"extra:testing"},{"ecosystem":"pypi","name":"httpx","versionSpec":"<=0.28.1,>=0.23.0","scope":"extra:full"},{"ecosystem":"pypi","name":"immutabledict","versionSpec":null,"scope":"extra:full"},{"ecosystem":"pypi","name":"ipython","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"jsonschema","versionSpec":null,"scope":"extra:full"},{"ecosystem":"pypi","name":"kfp","versionSpec":"<3.0.0,>=2.6.0","scope":"extra:testing"},{"ecosystem":"pypi","name":"mock","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"nltk","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"numpy","versionSpec":">=1.15.0","scope":"extra:full"},{"ecosystem":"pypi","name":"opentelemetry-exporter-gcp-logging","versionSpec":"<2.0.0,>=1.11.0a0","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp-proto-http","versionSpec":"<2","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"opentelemetry-resourcedetector-gcp","versionSpec":">=1.5.0.dev0","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"<2","scope":"extra:adk-testing"},{"ecosystem":"pypi","name":"packaging","versionSpec":">=14.3","scope":"runtime"},{"ecosystem":"pypi","name":"pandas","versionSpec":">=1.0.0","scope":"extra:full"},{"ecosystem":"pypi","name":"pillow","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"protobuf","versionSpec":"!=4.21.0,!=4.21.1,!=4.21.2,!=4.21.3,!=4.21.4,!=4.21.5,<7.0.0,>=3.20.2","scope":"runtime"},{"ecosystem":"pypi","name":"proto-plus","versionSpec":"<2.0.0,>=1.22.3","scope":"runtime"},{"ecosystem":"pypi","name":"pyarrow","versionSpec":">=10.0.1","scope":"extra:full"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"<3","scope":"runtime"},{"ecosystem":"pypi","name":"pytest-asyncio","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"pytest-cov","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"pytest-xdist","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":null,"scope":"extra:full"},{"ecosystem":"pypi","name":"ray","versionSpec":"!=2.10.*,!=2.11.*,!=2.12.*,!=2.13.*,!=2.14.*,!=2.15.*,!=2.16.*,!=2.17.*,!=2.18.*,!=2.19.*,!=2.20.*,!=2.21.*,!=2.22.*,!=2.23.*,!=2.24.*,!=2.25.*,!=2.26.*,!=2.27.*,!=2.28.*,!=2.29.*,!=2.30.*,!=2.31.*,!=2.32.*,!=2.34.*,!=2.35.*,!=2.36.*,!=2.37.*,!=2.38.*,!=2","scope":"extra:full"},{"ecosystem":"pypi","name":"requests","versionSpec":">=2.28.1","scope":"extra:endpoint"},{"ecosystem":"pypi","name":"requests-toolbelt","versionSpec":"<=1.0.0","scope":"extra:endpoint"},{"ecosystem":"pypi","name":"ruamel-yaml","versionSpec":null,"scope":"extra:full"},{"ecosystem":"pypi","name":"scikit-learn","versionSpec":"<1.6.0","scope":"extra:full"},{"ecosystem":"pypi","name":"sentencepiece","versionSpec":">=0.2.0","scope":"extra:testing"},{"ecosystem":"pypi","name":"starlette","versionSpec":">=0.17.1","scope":"extra:full"},{"ecosystem":"pypi","name":"tensorboard-plugin-profile","versionSpec":"<2.18.0,>=2.4.0","scope":"extra:full"},{"ecosystem":"pypi","name":"tensorflow","versionSpec":"<3.0.0,>=2.3.0","scope":"extra:full"},{"ecosystem":"pypi","name":"torch","versionSpec":"<2.1.0,>=2.0.0","scope":"extra:testing"},{"ecosystem":"pypi","name":"tqdm","versionSpec":">=4.23.0","scope":"extra:full"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"urllib3","versionSpec":"<1.27,>=1.21.1","scope":"extra:full"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":">=0.16.0","scope":"extra:full"},{"ecosystem":"pypi","name":"werkzeug","versionSpec":"<4.0.0,>=2.0.0","scope":"extra:full"},{"ecosystem":"pypi","name":"xgboost","versionSpec":null,"scope":"extra:testing"},{"ecosystem":"pypi","name":"xgboost-ray","versionSpec":null,"scope":"extra:ray-testing"}],"advisories":[{"id":"340fd1fa-35e9-4f96-8a3b-dba8c888db3a","url":"https://aisecwatch.com/issues/340fd1fa-35e9-4f96-8a3b-dba8c888db3a","cveId":"CVE-2026-2473","title":"GHSA-wh2j-26j7-9728: Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming","headline":null,"severity":"high","publishedAt":"2026-02-20T21:31:24.000Z","affected":["google-cloud-aiplatform@>= 1.21.0, < 1.133.0 (fixed: 1.133.0)"],"epssScore":0.00465},{"id":"d4c41857-1207-4484-975b-bc6378929f9b","url":"https://aisecwatch.com/issues/d4c41857-1207-4484-975b-bc6378929f9b","cveId":"CVE-2026-2472","title":"GHSA-qv8j-hgpc-vrq8: Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)","headline":null,"severity":"high","publishedAt":"2026-02-20T21:31:24.000Z","affected":["google-cloud-aiplatform@>= 1.98.0, < 1.131.0 (fixed: 1.131.0)"],"epssScore":0.00554}],"checkedAt":"2026-10-09T21:49:11.815Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}