Google DevSite

Assess

Platforms

Google's developer documentation platform used across several documentation sites.

Why it's here

Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.

Evidence (1)

8The New Stack·10/12/2026security
Google pays $90,000 bounty for unauthenticated RCE in DevSite
Google patched a two-month-old unauthenticated remote code execution flaw in its DevSite developer documentation infrastructure after a researcher reported it. The issue stemmed from a reused OAuth client secret stored in a Flask session cookie and also used to sign sessions, combined with unsafe pickle deserialization that allowed forged cookies to trigger code execution.