Browse all 4 CVE security advisories affecting dynatrace-oss. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-123812 | Dynatrace MCP Server: create_dynatrace_notebook missing the human-approval gate — dynatrace-mcp CWE-862 | 3.7 | Low | 2026-11-09 |
| CVE-2026-123811 | Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server` — dynatrace-mcp CWE-306 | 7.5 | High | 2026-11-09 |
| CVE-2026-123810 | Dynatrace MCP Server: DQL injection via parameters not documented as DQL — dynatrace-mcp CWE-89 | 4.3 | Medium | 2026-11-09 |
| CVE-2026-123809 | Dynatrace MCP Server: Workflow template injection via create_workflow_for_notification — dynatrace-mcp CWE-1336 | 4.2 | Medium | 2026-11-09 |
This page lists every published CVE security advisory associated with dynatrace-oss. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.