googleapis has 5 CVEs on record. The busiest recent month was June 2026 with 5. The median CVSS is 9.1 (critical), with 4 rated critical. None have a confirmed exploitation report.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 9.1
Publish → KEV: —
Last 90 days: 0 prev 5

Weakness classes

Products

github.com/googleapis/mcp-toolbox 5

Follow googleapis:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

googleapis vulnerabilities

CVEs affecting googleapis, newest first. Open any entry for full detail, references, and exploit status.

5 CVEsRSS

CVE-2026-11720Critical· 9.1

4mo ago

MCP Toolbox HTTP tool path parameters allow traversal to unintended endpoints

▾ Midnightgoogleapis · github.com/googleapis/mcp-toolboxEPSS 0.53%via OSV

CVE-2026-11717Critical

4mo ago

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

▾ Midnightgoogleapis · github.com/googleapis/mcp-toolboxEPSS 0.18%via GHSA

CVE-2026-11718Critical

4mo ago

googleapis/mcp-toolbox: authentication bypass vulnerability in the generic opaque token validation path (validateOpaqueToken)

▾ Midnightgoogleapis · github.com/googleapis/mcp-toolboxEPSS 0.18%via GHSA

CVE-2026-11719High

4mo ago

MCP Toolbox for Databases: authenticated authorization bypass

▾ Twilightgoogleapis · github.com/googleapis/mcp-toolboxEPSS 0.14%via GHSA

CVE-2026-11624Critical

4mo ago

MCP Toolbox for Databases has an Origin Validation Error

▾ Midnightgoogleapis · github.com/googleapis/mcp-toolboxEPSS 0.22%via OSV