AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
Models & APIs · Google

Google Gemini

Gemini models, the Gemini app and Workspace integration.

4Advisories
1critical
2high
1medium
2026-10-17Latest
Timeline · advisories per quarter
12024 Q2
12024 Q4
12025 Q3
12026 Q4
Named in sources

Reported for Google Gemini

01. highPrompt injectionGemini Trifecta: three injection flaws in Google’s Gemini suiteTenable found three now-fixed vulnerabilities in Gemini Cloud Assist, the Search Personalization model and the Browsing tool that exposed users to privacy risks, including search-injection. Google Gemini 2025-09-30 02. highPrompt injectionOWASP LLM01:2025: prompt injection is the top LLM app riskOWASP ranks prompt injection first in its Top 10 for LLM Applications 2025. Any app that feeds untrusted text to a model with tools or data access is exposed. OpenAI Anthropic Claude Google Gemini +4 more 2024-11-18
Same pattern

Also worth checking

01. criticalSecret exposureNew this weekOpenCode Console breach exposed saved provider API keysOpenCode said a breach of its hosted OpenCode Console affected 1.4% of Console users who had linked external providers. Their saved OpenAI and Anthropic keys may have been exposed, and Anthropic revoked Claude keys it believed were affected. OpenCode Anthropic Claude OpenAI +1 more 2026-10-17 02. mediumJailbreakMany-shot jailbreaking: long context windows weaken refusalsAnthropic published research showing that filling a long prompt with many fake dialogue examples can push models into answering requests they would normally refuse. Anthropic Claude OpenAI Google Gemini +2 more 2024-04-02
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.