Vulnerabilities
Do Unauthenticated Attackers Leverage ADK TypeScript Flaw to Read Files?
A critical flaw in Google ADK TypeScript versions before 0.6.0 allows unauthenticated attackers to read or write files outside the intended storage root.
Everything Sandbox Dispatch has reported about Google: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How a Leaked Flask Secret Enabled Remote Code Execution on Google Dev Sites
A researcher found that Google developer documentation sites used an OAuth secret as a Flask session key, allowing forged cookies to trigger arbitrary code execution.