1
I found an SSRF in Google's official AI tooling, and how Google reacted
Google官方AI工具被挖出SSRF漏洞，八天修复并获CVE，披露过程值得一看。
Earlier this year I found a server-side request forgery bug in Google's MCP Toolbox, the official server Google publishes for connecting language-mode…