github.com/googleapis/mcp-toolbox vulnerabilities (Go)

6 vulnerabilities.

• github.com/googleapis/mcp-toolbox Go Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder CVE-2026-11720 Fix available 9.3 CriticalJune 29, 2026
• github.com/googleapis/mcp-toolbox Go MCP Toolbox for Databases: authenticated authorization bypass CVE-2026-11719 Fix available 8.6 HighJune 18, 2026
• github.com/googleapis/mcp-toolbox Go googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) CVE-2026-11718 Fix available 9.3 CriticalJune 18, 2026
• github.com/googleapis/mcp-toolbox Go googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) CVE-2026-11717 Fix available 9.3 CriticalJune 18, 2026
• github.com/googleapis/mcp-toolbox Go MCP Toolbox for Databases has an Origin Validation Error CVE-2026-11624 Fix available 9.4 CriticalJune 13, 2026
• github.com/googleapis/mcp-toolbox Go MCP Toolbox for Databases vulnerable to DNS rebinding attacks CVE-2026-9739 Fix available 9.4 CriticalMay 27, 2026