Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
googleapis/genai-toolbox
main @ 35c13ad
51
Fixes
0
CVEs
HIGH
Peak severity
44.4%
Coverage
Highlights
Auth Bypass: 23 prior fixes. Scrutinize any change in this area.
internal/server/mcp.go: most-fixed (5 issues). Treat as high-risk during review.
29 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: A widespread pattern of failing to restrict queries and metadata calls to the configured list of allowed datasets historically allowed unauthorized data access. Remediation required checking query dry-runs and parsing tables.
Auth Bypass: Looker tools and client authorization checks were configured to bypass permission checks or unconditionally return true, allowing arbitrary dashboard retrieval.
SQL Injection: Unvalidated identifier interpolation and improper delimiter escaping allowed SQL injections across Clickhouse, MySQL, and BigQuery tool interfaces.