Skip to content
Threat Feed
Subscribe

Product

ActiveInbox Extension (<= 7.10.24)

1 brief RSS
high advisory

ActiveInbox Extension Hard-coded Google OAuth Client Secret

The ActiveInbox Chrome extension up to version 7.10.24 contains hard-coded Google OAuth Client Secrets in its service worker, potentially enabling unauthorized API access and OAuth flow manipulation.

ActiveInbox Extension credential-exposure chrome-extension oauth cve-2026-82808
1t 1c