HIGH8.2PyPI
PYSEC-2026-2621· CVE-2026-27826, GHSA-7r34-79r5-rcc9MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
Modified: 7/13/2026
package
PyPI/mcp-atlassian
pkg:pypi/mcp-atlassian
HIGH7.7PyPI
PYSEC-2026-3683· CVE-2026-73498, GHSA-g5r6-gv6m-f5jvmcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
Modified: 8/19/2026
CRITICAL9.0PyPI
PYSEC-2026-408· CVE-2026-27825, GHSA-xjgw-4wvw-rgm4MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
Modified: 7/1/2026
HIGH8.6PyPI
PYSEC-2026-4080· CVE-2026-77255, GHSA-2xj6-xx86-cwwcMCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue
Modified: 10/1/2026
HIGH8.8PyPI
PYSEC-2026-4081· CVE-2026-77243, GHSA-3r68-hf9h-887vMCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass
Modified: 10/1/2026
MEDIUM5.5PyPI
PYSEC-2026-4082· CVE-2026-77268, GHSA-4596-2p6p-28cvMCP Atlassian: Insecure File Permissions on OAuth Token Storage
Modified: 10/1/2026
MEDIUM5.9PyPI
PYSEC-2026-4083· CVE-2026-77265, GHSA-49xv-9743-pw8wMCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow
Modified: 10/1/2026
HIGH8.3PyPI
PYSEC-2026-4084· CVE-2026-77267, GHSA-5wf4-jqxh-8gm3mcp-atlassian has an incomplete SSRF remediation
Modified: 10/1/2026
HIGH7.1PyPI
PYSEC-2026-4085· CVE-2026-77261, GHSA-6529-c226-h328MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches
Modified: 10/1/2026
HIGH7.7PyPI
PYSEC-2026-4086· CVE-2026-77259, GHSA-6cr4-ccf3-x7h4MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
Modified: 10/1/2026
HIGH8.3PyPI
PYSEC-2026-4087· CVE-2026-77271, GHSA-6vmq-24h2-pj7jMCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)
Modified: 10/1/2026
HIGH7.7PyPI
PYSEC-2026-4088· CVE-2026-77258, GHSA-93xw-j965-9mx3MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
Modified: 10/1/2026
HIGH8.6PyPI
PYSEC-2026-4089· CVE-2026-77248, GHSA-cc5h-2pwp-pvccMCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
Modified: 10/1/2026
MEDIUM6.5PyPI
PYSEC-2026-4090· CVE-2026-77270, GHSA-f26r-j276-ggg4MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
Modified: 10/1/2026
HIGH8.3PyPI
PYSEC-2026-4091· CVE-2026-77260, GHSA-f4p7-qx46-wc5jMCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)
Modified: 10/1/2026
MEDIUM6.5PyPI
PYSEC-2026-4092· CVE-2026-77247, GHSA-f6pj-qv47-g96wMCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
Modified: 10/1/2026
MEDIUM5.4PyPI
PYSEC-2026-4093· CVE-2026-77272, GHSA-g2r2-3j32-j27xMCP Atlassian: Reflected XSS in OAuth Setup Callback Handler
Modified: 10/1/2026
MEDIUM6.1PyPI
PYSEC-2026-4094· CVE-2026-77250, GHSA-g5xv-mhgm-v5f6MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions
Modified: 10/1/2026
MEDIUM6.5PyPI
PYSEC-2026-4095· CVE-2026-77269, GHSA-h7wj-5v37-59r2MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)
Modified: 10/1/2026
HIGH8.8PyPI
PYSEC-2026-4096· CVE-2026-77274, GHSA-hgcf-4mq8-5266MCP Atlassian: SSRF Protection Bypass
Modified: 10/1/2026
MEDIUM6.5PyPI
PYSEC-2026-4097· CVE-2026-77266, GHSA-mfv2-4wvm-9pgpMCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call
Modified: 10/1/2026
HIGH8.3PyPI
PYSEC-2026-4098· CVE-2026-77257, GHSA-mrq8-fv7v-hhjgMCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
Modified: 10/1/2026
HIGH8.6PyPI
PYSEC-2026-4099· CVE-2026-77262, GHSA-p6hp-93wp-fh6pMCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)
Modified: 10/1/2026
MEDIUM5.3PyPI
PYSEC-2026-4100· CVE-2026-77249, GHSA-v9m3-wfh8-5646MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup
Modified: 10/1/2026
HIGH7.1PyPI
PYSEC-2026-4101· CVE-2026-77253, GHSA-vc25-24vv-fxxmMCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files
Modified: 10/1/2026
HIGH8.3PyPI
PYSEC-2026-4102· CVE-2026-77251, GHSA-w66g-j6c4-hcfcMCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)
Modified: 10/1/2026
CRITICAL10.0PyPI
PYSEC-2026-4103· CVE-2026-77244, GHSA-wrhw-j3f9-8vc6[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token
Modified: 10/1/2026
HIGH7.4PyPI
PYSEC-2026-4104· CVE-2026-77246, GHSA-wv8v-v4c5-v75jMCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path
Modified: 10/1/2026
HIGH8.6PyPI
GHSA-2xj6-xx86-cwwc· CVE-2026-77255, PYSEC-2026-4080MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue
Modified: 10/1/2026
HIGH8.8PyPI
GHSA-3r68-hf9h-887v· CVE-2026-77243, PYSEC-2026-4081MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass
Modified: 10/1/2026
MEDIUM5.5PyPI
GHSA-4596-2p6p-28cv· CVE-2026-77268, PYSEC-2026-4082MCP Atlassian: Insecure File Permissions on OAuth Token Storage
Modified: 10/1/2026
MEDIUM6.5PyPI
GHSA-489g-7rxv-6c8q· CVE-2026-73497MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)
Modified: 9/18/2026
MEDIUM5.9PyPI
GHSA-49xv-9743-pw8w· CVE-2026-77265, PYSEC-2026-4083MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow
Modified: 10/1/2026
HIGH8.3PyPI
GHSA-5wf4-jqxh-8gm3· CVE-2026-77267, PYSEC-2026-4084mcp-atlassian has an incomplete SSRF remediation
Modified: 10/1/2026
HIGH7.1PyPI
GHSA-6529-c226-h328· CVE-2026-77261, PYSEC-2026-4085MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches
Modified: 10/1/2026
HIGH7.7PyPI
GHSA-6cr4-ccf3-x7h4· CVE-2026-77259, PYSEC-2026-4086MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials
Modified: 10/1/2026
HIGH8.3PyPI
GHSA-6vmq-24h2-pj7j· CVE-2026-77271, PYSEC-2026-4087MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)
Modified: 10/1/2026
HIGH8.2PyPI
GHSA-7r34-79r5-rcc9· CVE-2026-27826, PYSEC-2026-2621MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
Modified: 7/13/2026
HIGH7.7PyPI
GHSA-93xw-j965-9mx3· CVE-2026-77258, PYSEC-2026-4088MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
Modified: 10/1/2026
HIGH8.6PyPI
GHSA-cc5h-2pwp-pvcc· CVE-2026-77248, PYSEC-2026-4089MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport
Modified: 10/1/2026
MEDIUM6.5PyPI
GHSA-f26r-j276-ggg4· CVE-2026-77270, PYSEC-2026-4090MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
Modified: 10/1/2026
HIGH8.3PyPI
GHSA-f4p7-qx46-wc5j· CVE-2026-77260, PYSEC-2026-4091MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)
Modified: 10/1/2026
HIGHPyPI
GHSA-f6pj-qv47-g96w· CVE-2026-77247, PYSEC-2026-4092MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters
Modified: 10/1/2026
MEDIUM5.4PyPI
GHSA-g2r2-3j32-j27x· CVE-2026-77272, PYSEC-2026-4093MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler
Modified: 10/1/2026
HIGH7.7PyPI
GHSA-g5r6-gv6m-f5jv· CVE-2026-73498, PYSEC-2026-3683mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-g5xv-mhgm-v5f6· CVE-2026-77250, PYSEC-2026-4094MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions
Modified: 10/1/2026
MEDIUM6.5PyPI
GHSA-h7wj-5v37-59r2· CVE-2026-77269, PYSEC-2026-4095MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)
Modified: 10/1/2026
HIGH8.8PyPI
GHSA-hgcf-4mq8-5266· CVE-2026-77274, PYSEC-2026-4096MCP Atlassian: SSRF Protection Bypass
Modified: 10/1/2026
MEDIUM6.5PyPI
GHSA-mfv2-4wvm-9pgp· CVE-2026-77266, PYSEC-2026-4097MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call
Modified: 10/1/2026
HIGH8.3PyPI
GHSA-mrq8-fv7v-hhjg· CVE-2026-77257, PYSEC-2026-4098MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths
Modified: 10/1/2026
HIGH8.6PyPI
GHSA-p6hp-93wp-fh6p· CVE-2026-77262, PYSEC-2026-4099MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)
Modified: 10/1/2026
MEDIUM5.3PyPI
GHSA-v9m3-wfh8-5646· CVE-2026-77249, PYSEC-2026-4100MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup
Modified: 10/1/2026
HIGH7.1PyPI
GHSA-vc25-24vv-fxxm· CVE-2026-77253, PYSEC-2026-4101MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files
Modified: 10/1/2026
HIGH8.3PyPI
GHSA-w66g-j6c4-hcfc· CVE-2026-77251, PYSEC-2026-4102MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)
Modified: 10/1/2026
HIGH7.7PyPI
GHSA-wm45-qh3g-v83f· CVE-2026-73496mcp-atlassian: Arbitrary server-side file read via attachment upload
Modified: 9/18/2026
CRITICAL10.0PyPI
GHSA-wrhw-j3f9-8vc6· CVE-2026-77244, PYSEC-2026-4103[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token
Modified: 10/1/2026
HIGH7.4PyPI
GHSA-wv8v-v4c5-v75j· CVE-2026-77246, PYSEC-2026-4104MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path
Modified: 10/1/2026
CRITICAL9.0PyPI
GHSA-xjgw-4wvw-rgm4· CVE-2026-27825, PYSEC-2026-408MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
Modified: 6/29/2026