google-cloud-sdk-core

Direct Vulnerabilities

Known vulnerabilities in the google-cloud-sdk-core package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-89407	<589.0.0-r0
L CVE-2026-91777	<589.0.0-r0
L CVE-2026-19032	<589.0.0-r0
L CVE-2026-89425	<589.0.0-r0
L CVE-2026-91776	<589.0.0-r0
L CVE-2026-83557	<589.0.0-r0
L CVE-2026-68497	<589.0.0-r0
L Resource Exhaustion	<588.0.0-r0
L CVE-2026-56854	<588.0.0-r0
L Improper Handling of Case Sensitivity	<588.0.0-r0
L CVE-2026-56852	<588.0.0-r0
L Improper Validation of Array Index	<588.0.0-r0
L Server-Side Request Forgery (SSRF)	<581.0.0-r0
L Cross-site Scripting (XSS)	<586.0.0-r0
L Improper Restriction of Rendered UI Layers or Frames	<586.0.0-r0
H Algorithmic Complexity	<586.0.0-r0
L Uncontrolled Memory Allocation	<586.0.0-r0
L Improper Restriction of Rendered UI Layers or Frames	<586.0.0-r0
L Resource Exhaustion	<586.0.0-r0
C Improper Check for Unusual or Exceptional Conditions	<586.0.0-r0
L Improper Restriction of Rendered UI Layers or Frames	<586.0.0-r0
H Information Exposure Through Caching	<586.0.0-r0
L GHSA-259r-337f-4rfw	<586.0.0-r0
L Cross-site Scripting (XSS)	<583.0.0-r0
L Improper Certificate Validation	<583.0.0-r0
L CVE-2025-61730	<583.0.0-r0
L CVE-2025-58183	<583.0.0-r0
M CVE-2025-47911	<583.0.0-r0
L CVE-2025-61731	<583.0.0-r0
L CVE-2025-4673	<583.0.0-r0
L Improper Certificate Validation	<583.0.0-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<583.0.0-r0
L CVE-2025-47912	<583.0.0-r0
L CVE-2025-61725	<583.0.0-r0
L Directory Traversal	<583.0.0-r0
L CVE-2025-61732	<583.0.0-r0
L Information Exposure Through Log Files	<583.0.0-r0
L CVE-2026-39824	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<583.0.0-r0
L Link Following	<583.0.0-r0
L Direct Request ('Forced Browsing')	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<583.0.0-r0
L Race Condition	<583.0.0-r0
L Algorithmic Complexity	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<583.0.0-r0
L CVE-2025-22874	<583.0.0-r0
L CVE-2025-4674	<583.0.0-r0
C CVE-2025-68121	<583.0.0-r0
L CVE-2025-47906	<583.0.0-r0
L GHSA-hrxh-6v49-42gf	<583.0.0-r0
L Improper Certificate Validation	<583.0.0-r0
L CVE-2025-58186	<583.0.0-r0
L Improper Authorization	<583.0.0-r0
L Allocation of Resources Without Limits or Throttling	<581.0.0-r0
L Incorrect Type Conversion or Cast	<581.0.0-r0
M HTTP Request Smuggling	<581.0.0-r0
L CVE-2026-46595	<581.0.0-r0
L Missing Authorization	<581.0.0-r0
L Resource Exhaustion	<581.0.0-r0
H Resource Exhaustion	<581.0.0-r0
L Uncontrolled Memory Allocation	<581.0.0-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<581.0.0-r0
L Deserialization of Untrusted Data	<581.0.0-r0
L Resource Exhaustion	<581.0.0-r0
L Improper Certificate Validation	<581.0.0-r0
L Improper Certificate Validation	<581.0.0-r0
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<581.0.0-r0
L CVE-2026-46598	<581.0.0-r0
H HTTP Request Smuggling	<581.0.0-r0
L Integer Overflow or Wraparound	<581.0.0-r0
L Improper Verification of Cryptographic Signature	<581.0.0-r0
L Improper Access Control	<581.0.0-r0
L GHSA-mhm7-754m-9p8w	<581.0.0-r0
L Incorrect Authorization	<581.0.0-r0
L Missing Authorization	<581.0.0-r0
M CRLF Injection	<581.0.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<581.0.0-r0
H Untrusted Search Path	<581.0.0-r0
H Allocation of Resources Without Limits or Throttling	<581.0.0-r0
L Out-of-Bounds	<581.0.0-r0
L Improper Certificate Validation	<581.0.0-r0
L Resource Exhaustion	<581.0.0-r0

Vulnerability

Vulnerable Version

CVE-2026-89407

<589.0.0-r0