Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p7w7-4929-vpj5
  • npm/@dynatrace-oss/dynatrace-mcp-server
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation 31 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-xrmj-5g4g-8987
  • npm/@dynatrace-oss/dynatrace-mcp-server
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification 31 Jul
  • Fix available
  • Severity - 4.2 (Medium)
GHSA-pqh8-p93p-2rx7
  • npm/@dynatrace-oss/dynatrace-mcp-server
@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL 31 Jul
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-pc2w-4mq8-32qw
  • npm/@dynatrace-oss/dynatrace-mcp-server
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate 29 Jul
  • Fix available
  • Severity - 3.7 (Low)