Apr 232025 GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages GCP’s ConfusedComposer flaw let attackers escalate privileges via PyPI packages; patched by Google on April 13.