googleapis/mcp-toolbox
main@ bd444e9
Fixes10
CVEs2
Peak severityHigh
Commits2,218
Regression coverage50.0%
Highlights
SQL Injection: 3 prior fixes. Scrutinize any change in this area.
internal/sources/http/http.go: most-fixed (2 issues). Treat as high-risk during review.
10 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
SSRF: 2 historical fix(es) link internal/sources/http/http.go to SSRF.
Authorization Bypass: 1 historical fix(es) link internal/tools/bigquery/bigquerycommon/table_name_parser.go to Authorization Bypass.
Authorization Bypass: 1 historical fix(es) link internal/server/mcp to Authorization Bypass.
Last analyzed 30 Sep 2026, 02:51 UTC