GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
7 advisories
`@dynatrace-oss/dynatrace-mcp-server` has Unauthenticated HTTP MCP Tool Invocation
High
GHSA-p7w7-4929-vpj5
was published
for
@dynatrace-oss/dynatrace-mcp-server
(npm)
Jul 31, 2026
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
Moderate
GHSA-xrmj-5g4g-8987
was published
for
@dynatrace-oss/dynatrace-mcp-server
(npm)
Jul 31, 2026
@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL
Moderate
GHSA-pqh8-p93p-2rx7
was published
for
@dynatrace-oss/dynatrace-mcp-server
(npm)
Jul 31, 2026
@dynatrace-oss/dynatrace-mcp-server's create_dynatrace_notebook missing the human-approval gate
Low
GHSA-pc2w-4mq8-32qw
was published
for
@dynatrace-oss/dynatrace-mcp-server
(npm)
Jul 29, 2026
MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
Moderate
CVE-2026-47250
was published
for
mcp-server-kubernetes
(npm)
Jun 5, 2026
Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching
Moderate
CVE-2026-46341
was published
for
@apify/actors-mcp-server
(npm)
May 19, 2026
n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport
High
GHSA-75hx-xj24-mqrw
was published
for
n8n-mcp
(npm)
Apr 10, 2026
ProTip!
Advisories are also available from the
GraphQL API