{"action":"Upgrade @dynatrace-oss/dynatrace-mcp-server to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"@dynatrace-oss/dynatrace-mcp-server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-xrmj-5g4g-8987","id":"tcs_01M5KGJSNXYE5D7PS98NNJJMAB","modified_at":"2026-07-31T16:15:20.508627424Z","published_at":"2026-07-31T16:01:07Z","references":["https://osv.dev/vulnerability/GHSA-xrmj-5g4g-8987","https://github.com/dynatrace-oss/dynatrace-mcp/security/advisories/GHSA-xrmj-5g4g-8987","https://github.com/dynatrace-oss/dynatrace-mcp/pull/547","https://github.com/dynatrace-oss/dynatrace-mcp/commit/64dfcb1095823d0fb43013635446288a6ff60e29","https://github.com/dynatrace-oss/dynatrace-mcp","https://github.com/dynatrace-oss/dynatrace-mcp/releases/tag/v2.0.0"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-xrmj-5g4g-8987","url":"https://osv.dev/vulnerability/GHSA-xrmj-5g4g-8987"}],"summary":"@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification"}