AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
Models & APIs · Google

Google Gemini

Gemini models, the Gemini app and Workspace integration.

3Advisories
0critical
2high
1medium
2025-09-30Latest
Timeline · advisories per quarter
12024 Q2
12024 Q4
12025 Q3
Named in sources

Reported for Google Gemini

01. highPrompt injectionGemini Trifecta: three injection flaws in Google’s Gemini suiteTenable found three now-fixed vulnerabilities in Gemini Cloud Assist, the Search Personalization model and the Browsing tool that exposed users to privacy risks, including search-injection. Google Gemini 2025-09-30 02. highPrompt injectionOWASP LLM01:2025: prompt injection is the top LLM app riskOWASP ranks prompt injection first in its Top 10 for LLM Applications 2025. Any app that feeds untrusted text to a model with tools or data access is exposed. OpenAI Anthropic Claude Google Gemini +4 more 2024-11-18
Same pattern

Also worth checking

01. mediumJailbreakMany-shot jailbreaking: long context windows weaken refusalsAnthropic published research showing that filling a long prompt with many fake dialogue examples can push models into answering requests they would normally refuse. Anthropic Claude OpenAI Google Gemini +2 more 2024-04-02
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.