← All credits
HE WEI(ギカク)(https://www.linkedin.com/in/gikaku/)
2 vulnerability records and advisories credit this contributor.
CVE-2026-16481
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
CVE-2026-11719
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers.
While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by sco