{"action":"Upgrade google-cloud-aiplatform to 1.133.0 or later.","affected":[{"fixed":"1.133.0","introduced":"1.21.0"}],"component":"google-cloud-aiplatform","cve_ids":["CVE-2026-2473"],"ecosystem":"PyPI","epss":0.00512,"exploited":false,"fixed_versions":["1.133.0"],"ghsa_id":"GHSA-wh2j-26j7-9728","id":"tcs_01M5KGZVNK5PWH1BWZ60V446JY","modified_at":"2026-07-13T16:31:55.207103223Z","published_at":"2026-07-13T14:36:37.220621Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2500","https://nvd.nist.gov/vuln/detail/CVE-2026-2473","https://docs.cloud.google.com/support/bulletins#gcp-2026-012","https://github.com/googleapis/python-aiplatform","https://github.com/googleapis/python-aiplatform/releases/tag/v1.133.0","https://pypi.org/project/google-cloud-aiplatform","https://github.com/advisories/GHSA-wh2j-26j7-9728"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-2500","url":"https://osv.dev/vulnerability/PYSEC-2026-2500"},{"source":"nvd","source_id":"CVE-2026-2473","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2473"}],"summary":"Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming"}