11 Total advisories
11 Vulnerabilities
0 Malware
Dependency scanning
Check whether github.com/googleapis/mcp-toolbox is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.1
CVE-2026-11720
MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints
UNKNOWN
CVE-2026-11720
MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints in github.com/googleapis/mcp-toolbox
UNKNOWN
CVE-2026-11624
MCP Toolbox for Databases has an Origin Validation Error
UNKNOWN
CVE-2026-9739
MCP Toolbox for Databases vulnerable to DNS rebinding attacks
UNKNOWN
CVE-2026-9739
MCP Toolbox for Databases vulnerable to DNS rebinding attacks in github.com/googleapis/mcp-toolbox
UNKNOWN
CVE-2026-11718
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
UNKNOWN
CVE-2026-11718
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) in github.com/googleapis/mcp-toolbox
UNKNOWN
CVE-2026-11717
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)
UNKNOWN
CVE-2026-11717
googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken) in github.com/googleapis/mcp-toolbox
UNKNOWN
CVE-2026-11719
MCP Toolbox for Databases: authenticated authorization bypass
UNKNOWN
CVE-2026-11719
MCP Toolbox for Databases: authenticated authorization bypass in github.com/googleapis/mcp-toolbox
Browse more Go advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes