{"action":"Upgrade google-cloud-aiplatform to 1.133.0 or later.","affected":[{"fixed":"1.133.0","introduced":"1.21.0"}],"component":"google-cloud-aiplatform","cve_ids":["CVE-2026-2473"],"ecosystem":"PyPI","epss":0.00512,"exploited":false,"fixed_versions":["1.133.0"],"ghsa_id":"GHSA-wh2j-26j7-9728","id":"tcs_01M5KG26XS20ACR1WWRFRQ6999","modified_at":"2026-09-10T03:50:35.983793619Z","published_at":"2026-02-20T21:31:24Z","references":["https://osv.dev/vulnerability/GHSA-wh2j-26j7-9728","https://nvd.nist.gov/vuln/detail/CVE-2026-2473","https://docs.cloud.google.com/support/bulletins#gcp-2026-012","https://github.com/googleapis/python-aiplatform","https://github.com/googleapis/python-aiplatform/releases/tag/v1.133.0"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-wh2j-26j7-9728","url":"https://osv.dev/vulnerability/GHSA-wh2j-26j7-9728"},{"source":"nvd","source_id":"CVE-2026-2473","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2473"}],"summary":"Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming"}