From 937ae7035e715eeab66e4cdb522e861b835caf25 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 10:05:40 -0400
Subject: [PATCH] Add MCP Toolbox scope fix references

---
 .../2026/06/GHSA-5gf6-gc35-xjpc/GHSA-5gf6-gc35-xjpc.json  | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/advisories/github-reviewed/2026/06/GHSA-5gf6-gc35-xjpc/GHSA-5gf6-gc35-xjpc.json b/advisories/github-reviewed/2026/06/GHSA-5gf6-gc35-xjpc/GHSA-5gf6-gc35-xjpc.json
index ab44adb07e38c..0682863cbf126 100644
--- a/advisories/github-reviewed/2026/06/GHSA-5gf6-gc35-xjpc/GHSA-5gf6-gc35-xjpc.json
+++ b/advisories/github-reviewed/2026/06/GHSA-5gf6-gc35-xjpc/GHSA-5gf6-gc35-xjpc.json
@@ -48,6 +48,14 @@
       "type": "WEB",
       "url": "https://github.com/googleapis/mcp-toolbox/pull/3335"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/googleapis/mcp-toolbox/commit/adce4abb27327aae4e9736581df7a544b55c939e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/googleapis/mcp-toolbox/releases/tag/v1.4.0"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/googleapis/mcp-toolbox"