googleapis/mcp-toolbox Security Advisories | GitStock

critical2026-06-29

MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints

GHSA-vwxw-jrg6-9jxv · CVE-2026-11720

high2026-06-18

MCP Toolbox for Databases: authenticated authorization bypass

GHSA-5gf6-gc35-xjpc · CVE-2026-11719

critical2026-06-18

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

GHSA-wcpr-6g7x-p44r · CVE-2026-11718

critical2026-06-18

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

GHSA-8fcc-w5hv-4gxv · CVE-2026-11717

critical2026-06-13

MCP Toolbox for Databases has an Origin Validation Error

GHSA-76g7-m3xw-x9gr · CVE-2026-11624

critical2026-05-28

MCP Toolbox for Databases vulnerable to DNS rebinding attacks

GHSA-7pf3-8xx7-rvhf · CVE-2026-9739