{"action":"Upgrade @dynatrace-oss/dynatrace-mcp-server to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"@dynatrace-oss/dynatrace-mcp-server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-p7w7-4929-vpj5","id":"tcs_01M5KG2ZT6XGW1FCK3MEXBM477","modified_at":"2026-07-31T16:15:20.419494638Z","published_at":"2026-07-31T16:05:57Z","references":["https://osv.dev/vulnerability/GHSA-p7w7-4929-vpj5","https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-p7w7-4929-vpj5","https://github.com/dynatrace-oss/dynatrace-mcp/pull/536","https://github.com/dynatrace-oss/dynatrace-mcp/commit/8f12972481e9165e8bd24d63b0a9e71976f85a43","https://github.com/dynatrace-oss/dynatrace-mcp","https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.0.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p7w7-4929-vpj5","url":"https://osv.dev/vulnerability/GHSA-p7w7-4929-vpj5"}],"summary":"`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation"}