Google API keys can remain usable for up to 23 minutes after deletion

In three linesGoogle API keys remain active for up to 23 minutes after deletion. This propagation delay creates a vulnerability window where deleted keys can still be exploited.

Summary generated by Claude — human-verified