mcp_toolbox_for_databases_googleapis_mcp-toolbox vulnerabilities

CVEs whose affected-version data names the mcp_toolbox_for_databases_googleapis_mcp-toolbox package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-16481Medium· 6.0

1mo ago

Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool

A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an …

▾ SunlitGoogle · MCP Toolbox for Databases (googleapis/mcp-toolbox)EPSS 0.22%via CVEORG