Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

mcp-atlassian

30 known vulnerabilities (2 critical, 19 high, 9 medium), with the versions each affects and the releases that fix them.

Latest release
0.23.1 (Aug 19, 2026): no advisory affects it
Newest unaffected release
0.23.1 (Aug 19, 2026), the latest release
Advisories
30 · 2 critical, 19 high, 9 medium
Weekly downloads
213.2K
Dependents
2
Releases
83 since 0.1.1 (Dec 4, 2024)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 30 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 30

  • MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77249Medium 5.3

    MCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77268Medium 5.5

    MCP Atlassian: Insecure File Permissions on OAuth Token Storage

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77272Medium 5.4

    MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77269Medium 6.5

    MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77266Medium 6.5

    MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

Show all 30 advisoriesShow fewer advisories

  • MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • mcp-atlassian has an incomplete SSRF remediation

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77250Medium 6.1

    MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77244Critical 10.0

    [mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77265Medium 5.9

    MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-77270Medium 6.5

    MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: SSRF Protection Bypass

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 74 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-73497Medium 6.5

    MCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to…

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 66 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian: Arbitrary server-side file read via attachment upload

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 66 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment

    Affected: fixed in 0.22.0.

    Fixed in 0.22.0 (released Jul 10, 2026, 33 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • CVE-2026-27825Critical 9.1

    MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in…

    Affected: fixed in 0.17.0.

    Fixed in 0.17.0 (released Feb 24, 2026, 14 days before disclosure).

    The latest release, 0.23.1, is not affected.

  • MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

    Affected: fixed in 0.17.0.

    Fixed in 0.17.0 (released Feb 24, 2026, 14 days before disclosure).

    The latest release, 0.23.1, is not affected.