Google DevSite Bug Chain Turned Exposed Flask Secrets Into Remote Code Execution

13 October 2026  |  dark6  |  Vulnerability

Google fixed a critical DevSite vulnerability chain in which an OAuth secret exposed inside a Flask session cookie could be reused to forge sessions and reach unsafe Python...

>> read more