Spectra Assure
Community
Docs
warningRisk: Vulnerabilities
Scanned: about 1 month ago

google-cloud-automl

Artifact:
Google Cloud Automl API client library
License: Permissive (Apache-2.0)
Published: 5 months ago



SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
1 medium severity vulnerabilities
Hardening
No application hardening issues

Threats

Tampering
No evidence of software tampering
Malware
No evidence of malware inclusion

Popularity

351.24M
Total Downloads
Contributor
Declared Dependencies
7
Dependents

Top issues

Problem

Software composition analysis has identified a component with one or more known vulnerabilities. Based on the CVSS scoring, these vulnerabilities have been marked as medium severity.

Prevalence in PyPI community

48 packages
found in
Top 100
311 packages
found in
Top 1k
2806 packages
found in
Top 10k
142146 packages
in community

Next steps

Perform impact analysis for the reported CVEs.
Update the component to the latest version.
If the update can't resolve the issue, create a plan to isolate or replace the affected component.

Top behaviors

Prevalence in PyPI community

Behavior often found in this community (Common)
68 packages
found in
Top 100
540 packages
found in
Top 1k
3644 packages
found in
Top 10k
154572 packages
in community

Prevalence in PyPI community

Behavior often found in this community (Common)
49 packages
found in
Top 100
364 packages
found in
Top 1k
2374 packages
found in
Top 10k
87567 packages
in community

Prevalence in PyPI community

Behavior often found in this community (Common)
25 packages
found in
Top 100
205 packages
found in
Top 1k
1070 packages
found in
Top 10k
28156 packages
in community

Prevalence in PyPI community

Behavior often found in this community (Common)
75 packages
found in
Top 100
593 packages
found in
Top 1k
4478 packages
found in
Top 10k
229841 packages
in community

Prevalence in PyPI community

Behavior often found in this community (Common)
74 packages
found in
Top 100
606 packages
found in
Top 1k
4422 packages
found in
Top 10k
171320 packages
in community

Top vulnerabilities

Vulnerability Exploitation Lifecycle
(1 Active Vulnerabilities)
1 (1 Fixable)
CVE-2025-4565m
None
None
None
Exploits Unknown
Exploits Exist
Exploited by Malware
Patching Mandated

This website uses cookies to ensure the best website experience. By continuing to use this website you are giving your consent to cookies being used. Detailed information about our use of cookies is here.