dynatrace-oss/dynatrace-mcp Security Advisories | GitStock

high2026-07-31

`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation

GHSA-p7w7-4929-vpj5

medium2026-07-31

@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification

GHSA-xrmj-5g4g-8987

medium2026-07-31

@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL

GHSA-pqh8-p93p-2rx7

low2026-07-29

@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate

GHSA-pc2w-4mq8-32qw