HIGH7.5npm
GHSA-p7w7-4929-vpj5`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
Modified: 7/31/2026
package
npm/@dynatrace-oss/dynatrace-mcp-server
pkg:npm/%40dynatrace-oss/dynatrace-mcp-server
LOW3.7npm
GHSA-pc2w-4mq8-32qw@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
Modified: 7/29/2026
MEDIUM4.3npm
GHSA-pqh8-p93p-2rx7@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
Modified: 7/31/2026
MEDIUM4.2npm
GHSA-xrmj-5g4g-8987@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
Modified: 7/31/2026