Google mcp-toolbox

• CVE-2026-14541 High 8.0 Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider 0.3%
• CVE-2026-14540 High 8.0 Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox 0.1%
• CVE-2026-14539 Medium 6.6 Denial of Service via Unrestricted Payload Buffering in MCP Toolbox 0.2%
• CVE-2026-14538 Medium 5.7 BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox 0.2%
• CVE-2026-14537 High 8.1 Authorization Bypass in MCP Toolbox Legacy HTTP Endpoints 0.3%