How many CVEs have a located fix in googleapis/mcp-toolbox?

14 published CVEs have a fix traced to functions in googleapis/mcp-toolbox, touching 60 functions across 29 files.

Which function in googleapis/mcp-toolbox has been patched by the most CVEs?

NewServer in internal/server/server.go has been changed by 3 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in googleapis/mcp-toolbox?

The median fix changes 81 lines. 21% of fixes change 20 lines or fewer, and 14% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

go

#412 of 500 repositories

googleapis/mcp-toolbox

Name: googleapis/mcp-toolbox: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 29, 2026

14

CVE fixes located

Published CVEs

60

Functions patched

Distinct function sites

29

Files patched

Distinct source files

2026

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in googleapis/mcp-toolbox, the earliest published in 2026. Those fixes changed 60 distinct functions across 29 files, in 142 patch hunks.

Among the 500 repositories tracked here, googleapis/mcp-toolbox ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in googleapis/mcp-toolbox changed by the most CVE fixes.

Most patched files

Files in googleapis/mcp-toolbox changed by the most CVE fixes.

1internal/server/server.go6 CVEs · 7 functions
2internal/auth/generic/generic.go4 CVEs · 9 functions
3internal/server/config.go4 CVEs · 3 functions
4internal/server/mcp.go4 CVEs · 3 functions
5internal/auth/google/google.go3 CVEs · 3 functions
6internal/tools/bigquery/bigquerycommon/mock_source.go2 CVEs · 4 functions
7cmd/root.go2 CVEs · 2 functions
8internal/auth/auth.go2 CVEs · 2 functions
9internal/server/mcp/util/auth.go2 CVEs · 1 functions
10internal/server/mcp/v20241105/method.go2 CVEs · 1 functions

Fix size

How much code a CVE fix in googleapis/mcp-toolbox changes, with backports counted once.

81

Median lines changed

Added plus removed, per CVE

21%

Fixes of 20 lines or fewer

Share of CVE fixes

14%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in googleapis/mcp-toolbox, and the functions each fix changed.

Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases
CVE-2026-102242ResolveSymlinks validateLocalPath ResolveWithinDir
High · CVSS 8.6
EPSS 0.4%2026-09-29
Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider
CVE-2026-14541Initialize
High · CVSS 8.0
EPSS 0.3%2026-07-31
Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox
CVE-2026-14540dnsResolver Initialize Config
High · CVSS 8.0
EPSS 0.1%2026-07-31
Denial of Service via Unrestricted Payload Buffering in MCP Toolbox
CVE-2026-14539toolInvokeHandler httpHandler NewServer
Medium · CVSS 6.6
EPSS 0.2%2026-07-31
BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox
CVE-2026-14538parseSQL Invoke BigQueryWriteMode
Medium · CVSS 5.7
EPSS 0.2%2026-07-31
Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints
CVE-2026-14537run InitializeConfigs IsMCPEnabled
High · CVSS 8.1
EPSS 0.3%2026-07-31
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
CVE-2026-16481FHIRFetchPage
Medium · CVSS 6.0
EPSS 0.2%2026-07-27
SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox
CVE-2026-15829Invoke Initialize StripSingleQuotes
High · CVSS 8.6
EPSS 0.2%2026-07-21
Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder
CVE-2026-11720getURL
Critical · CVSS 9.3
EPSS 0.5%2026-06-29
MCP Toolbox for Databases: authenticated authorization bypass
CVE-2026-11719toolsCallHandler validateJwtToken validateClaims
High · CVSS 8.6
EPSS 0.1%2026-06-18
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
CVE-2026-11718validateClaims discoverOIDCConfig
Critical · CVSS 9.3
EPSS 0.2%2026-06-18
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
CVE-2026-11717IsMCPEnabled Initialize MCPAuthError
Critical · CVSS 9.3
EPSS 0.2%2026-06-18

Get an alert for each new googleapis/mcp-toolbox CVE, with the patched functions and AI-written analysis.

Monitor mcp-toolbox CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in googleapis/mcp-toolbox.

How many CVEs have a located fix in googleapis/mcp-toolbox?: 14 published CVEs have a fix traced to functions in googleapis/mcp-toolbox, touching 60 functions across 29 files.
Which function in googleapis/mcp-toolbox has been patched by the most CVEs?: NewServer in internal/server/server.go has been changed by 3 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in googleapis/mcp-toolbox?: The median fix changes 81 lines. 21% of fixes change 20 lines or fewer, and 14% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track googleapis/mcp-toolbox CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing