io.github.dynatrace-oss/Dynatrace-mcp
[DEPRECATED] Dynatrace MCP Server. Migrate to dynatrace-for-ai or Dynatrace Remote MCP Server.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.dynatrace-oss/Dynatrace-mcp
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-p7w7-4929-vpj5`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool InvocationAlso filed as CVE-2026-123811 | high | Not flagged | Jul 31, 2026 |
| GHSA-xrmj-5g4g-8987@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notificationAlso filed as CVE-2026-123809 | medium | Not flagged | Jul 31, 2026 |
| GHSA-pqh8-p93p-2rx7@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQLAlso filed as CVE-2026-123810 | medium | Not flagged | Jul 31, 2026 |
| GHSA-pc2w-4mq8-32qw@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gateAlso filed as CVE-2026-123812 | low | Not flagged | Jul 29, 2026 |
Versions in the registry
2.1.2 (listed), 2.1.1, 2.1.0, 2.0.1, 2.0.0, 1.8.7, 1.8.6, 1.8.5, 1.8.4, 1.8.3, 1.8.2, 1.8.1, 1.8.0, 1.7.6, 1.7.5, 1.7.4, 1.7.3, 1.7.1, 1.7.0, 1.6.1, 1.6.0, 1.5.3, 1.5.2, 1.5.1, 1.5.0, 1.5.0-beta.3, 1.4.0, 1.1.0, 1.0.1, 1.0.0 and 5 older