mcp-toolbox-sdk-python vulnerabilities

CVEs whose affected-version data names the mcp-toolbox-sdk-python package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19202Critical· 9.1

yesterday

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audi…

▾ MidnightGoogle · mcp-toolbox-sdk-pythonvia NVD