Advisories · Technology
MCP Toolbox for Databases (googleapis/mcp-toolbox).
Every CVE that names MCP Toolbox for Databases (googleapis/mcp-toolbox) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
- MCP Toolbox for Databases (googleapis/mcp-toolbox)
- Server-side request forgery (SSRF)
- CVSS 8.6 High
SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox
- MCP Toolbox for Databases (googleapis/mcp-toolbox)
- SQL injection
- Broken access control