{
 "schema_version": "1.0.0",
 "generated_at": "2026-10-11T21:20:17+00:00",
 "package": {
  "ecosystem": "npm",
  "name": "@toolbox-sdk/server"
 },
 "registry": {
  "listed": true,
  "verified": false,
  "maintainer": "Google",
  "entry_updated": "2026-10-11",
  "registry_updated": "2026-10-11"
 },
 "known_vulnerabilities": [
  {
   "cve": "CVE-2026-14540",
   "cvss": null,
   "description": "SSRF: the generic HTTP source and tool follow redirects with no target-IP validation.",
   "fixed_in": "1.5.0",
   "source": "NVD",
   "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-14540"
  }
 ],
 "capabilities": [
  "database",
  "network_out"
 ],
 "attestation": {
  "hash_pins_available": false,
  "attestation_expected": false
 },
 "typosquat_of": null,
 "tags": [
  "database",
  "google"
 ],
 "links": {
  "repo": "https://github.com/googleapis/mcp-toolbox",
  "verdict_page": "https://mcp-audit.dev/servers/npm/at-toolbox-sdk-server/"
 }
}