Skip to content
OpenAdvisories

Vendor

Google Cloud Platform

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.8

    Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration

    A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended secur…