Go/github.com/googleapis/mcp-toolbox CVE-2026-9739: unknown, EPSS 0.28%
MCP Toolbox for Databases vulnerable to DNS rebinding attacks in github.com/googleapis/mcp-toolbox
Action: Upgrade github.com/googleapis/mcp-toolbox to 1.2.0 or later.
go get github.com/googleapis/mcp-toolbox@v1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GO-2026-5870
- https://github.com/advisories/GHSA-7pf3-8xx7-rvhf
- https://nvd.nist.gov/vuln/detail/CVE-2026-9739
- https://github.com/googleapis/mcp-toolbox/commit/c4c7bd917e686de68e2be866cfe3872c3439efae
- https://github.com/googleapis/mcp-toolbox/pull/3054
- https://github.com/googleapis/mcp-toolbox/issues/3053
CVE-2026-9739 · published · modified · JSON