From 57c2c527b0f3c5f492b0e6147f5e49ee9cdaa6b8 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 09:45:42 -0400
Subject: [PATCH] Add MCP Toolbox opaque token fix references

---
 .../2026/06/GHSA-wcpr-6g7x-p44r/GHSA-wcpr-6g7x-p44r.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-wcpr-6g7x-p44r/GHSA-wcpr-6g7x-p44r.json b/advisories/github-reviewed/2026/06/GHSA-wcpr-6g7x-p44r/GHSA-wcpr-6g7x-p44r.json
index 7d39fe97951a9..8d7d0615f353f 100644
--- a/advisories/github-reviewed/2026/06/GHSA-wcpr-6g7x-p44r/GHSA-wcpr-6g7x-p44r.json
+++ b/advisories/github-reviewed/2026/06/GHSA-wcpr-6g7x-p44r/GHSA-wcpr-6g7x-p44r.json
@@ -44,6 +44,14 @@
       "type": "WEB",
       "url": "https://github.com/googleapis/mcp-toolbox/pull/3360"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/googleapis/mcp-toolbox/commit/1d8df0df590383ba56091b6e4d7c37ab7d7d9749"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/googleapis/mcp-toolbox/releases/tag/v1.4.0"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/googleapis/mcp-toolbox"