A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies ...