mcp-atlassian

PyPI30 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting mcp-atlassianpage 1 of 1

CVE-2026-27825HIGHCVSS 8.0EG 8.0fixed in 0.17.0
2026-03-10
vulnerable: 0.1.1 ... 0.9.0 (71 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts a `download_path` parameter that is written to without any …
CVE-2026-27826HIGHCVSS 8.2EG 8.2fixed in 0.17.0
2026-03-10
vulnerable: 0.1.1 ... 0.9.0 (71 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, an unauthenticated attacker who can reach the mcp-atlassian HTTP endpoint can force the server process to make ou…
CVE-2026-73496HIGHCVSS 7.7EG 7.7fixed in 0.22.0
2026-09-14
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/m…
CVE-2026-73497MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-14
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0.22.0, validate_url_for_ssrf resolves the attacker-controlled X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url heade…
CVE-2026-73498HIGHCVSS 7.7EG 7.7fixed in 0.22.0
2026-08-12
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment passes its client-supplied file_path directly to open(file_path, "rb") in src/mcp_atlassian/…
CVE-2026-77243HIGHCVSS 8.8EG 8.8fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatche…
CVE-2026-77244CRITICALCVSS 10.0EG 10.0fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verified user identity and downstream fetcher construction falls back to th…
CVE-2026-77246HIGHCVSS 8.6EG 8.6fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=false accepts a request without an Authorization identity and permits at…
CVE-2026-77247MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-controlled path arguments on the MCP server and open those files before…
CVE-2026-77248HIGHCVSS 8.6EG 8.6fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while uplo…
CVE-2026-77249MEDIUMCVSS 5.3EG 5.3fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the module-level requests.get function instead of the fetcher's protected …
CVE-2026-77250MEDIUMCVSS 6.1EG 6.1fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file containing access and refresh tokens under the user's .mcp-atlassian directo…
CVE-2026-77251MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause because it checks only for the presence of project syntax, Confluence sear…
CVE-2026-77253HIGHCVSS 7.1EG 7.1fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlass…
CVE-2026-77255HIGHCVSS 8.6EG 8.6fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is converted into local paths and routed to the attachment upload implementati…
CVE-2026-77257MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided file_path to local file operations without restricti…
CVE-2026-77258HIGHCVSS 7.7EG 7.7fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/attachments.py accepts a caller-controlled file_path and opens the sele…
CVE-2026-77259HIGHCVSS 7.7EG 7.7fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server-local file without checking that the resolved path remains in…
CVE-2026-77260HIGHCVSS 7.5EG 7.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementations accept an unconstrained file_path and open the referenced serve…
CVE-2026-77261HIGHCVSS 8.5EG 8.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and ConfluenceFetcher sessions created through the basic-auth and oauth_…
CVE-2026-77262HIGHCVSS 8.6EG 8.6fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment accepts an attacker-controlled file_path and does not apply the path restriction added for t…
CVE-2026-77265HIGHCVSS 7.5EG 7.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves the hostname again for…
CVE-2026-77266MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment accepts absolute paths and traversal sequences without constraining the resolved path to the server wor…
CVE-2026-77267MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url headers are processed by _process_authentication_headers and used…
CVE-2026-77268MEDIUMCVSS 5.5EG 5.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes …
CVE-2026-77269MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CVE-2026-27825 protects download destinations but does not constrain source paths used by attachment …
CVE-2026-77270MEDIUMCVSS 6.5EG 6.5fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled file_path values as trusted server-local paths. T…
CVE-2026-77271HIGHCVSS 8.8EG 8.8fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os.getcwd(), and affected Confluence attachment call sites omit base_di…
CVE-2026-77272MEDIUMCVSS 6.1EG 6.1fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler._send_response in oauth_setup.py and interpolated into an HT…
CVE-2026-77274HIGHCVSS 8.2EG 8.2fixed in 0.22.0
2026-09-22
vulnerable: 0.1.1 ... 0.9.0 (79 versions)
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority confusion because it interprets the authority differently from the Reques…

Check whether mcp-atlassian is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mcp-atlassian CVEs against the assets you own.

Book a Demo →