mcp-atlassian (PyPI)
Advisories
58
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.22.0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "mcp-atlassian>=0.22.0"poetry
poetry add "mcp-atlassian>=0.22.0"uv
uv add "mcp-atlassian>=0.22.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-g2r2-3j32-j27x MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler |
Medium EPSS 0.26% |
< 0.22.0 | 0.22.0 |
| GHSA-g2r2-3j32-j27x MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler |
Medium EPSS 0.26% |
< 0.22.0 | 0.22.0 |
| GHSA-h7wj-5v37-59r2 MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825) |
Medium EPSS 0.43% |
< 0.22.0 | 0.22.0 |
| GHSA-h7wj-5v37-59r2 MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825) |
Medium EPSS 0.43% |
< 0.22.0 | 0.22.0 |
| GHSA-4596-2p6p-28cv MCP Atlassian: Insecure File Permissions on OAuth Token Storage |
Medium EPSS 0.15% |
< 0.22.0 | 0.22.0 |
| GHSA-4596-2p6p-28cv MCP Atlassian: Insecure File Permissions on OAuth Token Storage |
Medium EPSS 0.15% |
< 0.22.0 | 0.22.0 |
| GHSA-mfv2-4wvm-9pgp MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call |
Medium EPSS 0.50% |
< 0.22.0 | 0.22.0 |
| GHSA-mfv2-4wvm-9pgp MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call |
Medium EPSS 0.50% |
< 0.22.0 | 0.22.0 |
| GHSA-p6hp-93wp-fh6p MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4) |
High EPSS 0.56% |
< 0.22.0 | 0.22.0 |
| GHSA-p6hp-93wp-fh6p MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4) |
High EPSS 0.56% |
< 0.22.0 | 0.22.0 |
| GHSA-6cr4-ccf3-x7h4 MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials |
High EPSS 0.44% |
< 0.22.0 | 0.22.0 |
| GHSA-6cr4-ccf3-x7h4 MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials |
High EPSS 0.44% |
< 0.22.0 | 0.22.0 |
| GHSA-mrq8-fv7v-hhjg MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths |
Medium EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-mrq8-fv7v-hhjg MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths |
Medium EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-2xj6-xx86-cwwc MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue |
High EPSS 0.46% |
< 0.22.0 | 0.22.0 |
| GHSA-2xj6-xx86-cwwc MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue |
High EPSS 0.46% |
< 0.22.0 | 0.22.0 |
| GHSA-vc25-24vv-fxxm MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files |
High EPSS 0.44% |
< 0.22.0 | 0.22.0 |
| GHSA-vc25-24vv-fxxm MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files |
High EPSS 0.44% |
< 0.22.0 | 0.22.0 |
| GHSA-v9m3-wfh8-5646 MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup |
Medium EPSS 0.34% |
< 0.22.0 | 0.22.0 |
| GHSA-v9m3-wfh8-5646 MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup |
Medium EPSS 0.34% |
< 0.22.0 | 0.22.0 |
| GHSA-cc5h-2pwp-pvcc MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport |
High EPSS 0.47% |
< 0.22.0 | 0.22.0 |
| GHSA-cc5h-2pwp-pvcc MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport |
High EPSS 0.47% |
< 0.22.0 | 0.22.0 |
| GHSA-f6pj-qv47-g96w MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters |
High EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-f6pj-qv47-g96w MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters |
High EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-wv8v-v4c5-v75j MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path |
High EPSS 0.47% |
< 0.22.0 | 0.22.0 |
| GHSA-wv8v-v4c5-v75j MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path |
High EPSS 0.47% |
< 0.22.0 | 0.22.0 |
| GHSA-hgcf-4mq8-5266 MCP Atlassian: SSRF Protection Bypass |
High EPSS 0.33% |
< 0.22.0 | 0.22.0 |
| GHSA-hgcf-4mq8-5266 MCP Atlassian: SSRF Protection Bypass |
High EPSS 0.33% |
< 0.22.0 | 0.22.0 |
| GHSA-6vmq-24h2-pj7j MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4) |
High EPSS 0.60% |
< 0.22.0 | 0.22.0 |
| GHSA-6vmq-24h2-pj7j MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4) |
High EPSS 0.60% |
< 0.22.0 | 0.22.0 |
| GHSA-f26r-j276-ggg4 MCP Atlassian: Arbitrary File Read via Upload Attachment Tools |
Medium EPSS 0.50% |
< 0.22.0 | 0.22.0 |
| GHSA-f26r-j276-ggg4 MCP Atlassian: Arbitrary File Read via Upload Attachment Tools |
Medium EPSS 0.50% |
< 0.22.0 | 0.22.0 |
| GHSA-5wf4-jqxh-8gm3 mcp-atlassian has an incomplete SSRF remediation |
Medium EPSS 0.32% |
< 0.22.0 | 0.22.0 |
| GHSA-5wf4-jqxh-8gm3 mcp-atlassian has an incomplete SSRF remediation |
Medium EPSS 0.32% |
< 0.22.0 | 0.22.0 |
| GHSA-49xv-9743-pw8w MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow |
High EPSS 0.29% |
< 0.22.0 | 0.22.0 |
| GHSA-49xv-9743-pw8w MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow |
High EPSS 0.29% |
< 0.22.0 | 0.22.0 |
| GHSA-6529-c226-h328 MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches |
High EPSS 0.37% |
< 0.22.0 | 0.22.0 |
| GHSA-6529-c226-h328 MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches |
High EPSS 0.37% |
< 0.22.0 | 0.22.0 |
| GHSA-f4p7-qx46-wc5j MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira) |
High EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-f4p7-qx46-wc5j MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira) |
High EPSS 0.39% |
< 0.22.0 | 0.22.0 |
| GHSA-93xw-j965-9mx3 MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path() |
High EPSS 0.37% |
< 0.22.0 | 0.22.0 |
| GHSA-93xw-j965-9mx3 MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path() |
High EPSS 0.37% |
< 0.22.0 | 0.22.0 |
| GHSA-w66g-j6c4-hcfc MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud) |
Medium EPSS 0.27% |
< 0.22.0 | 0.22.0 |
| GHSA-w66g-j6c4-hcfc MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud) |
Medium EPSS 0.27% |
< 0.22.0 | 0.22.0 |
| GHSA-g5xv-mhgm-v5f6 MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions |
Medium EPSS 0.11% |
< 0.22.0 | 0.22.0 |
| GHSA-g5xv-mhgm-v5f6 MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions |
Medium EPSS 0.11% |
< 0.22.0 | 0.22.0 |
| GHSA-wrhw-j3f9-8vc6 [mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token |
Critical EPSS 0.35% |
< 0.22.0 | 0.22.0 |
| GHSA-wrhw-j3f9-8vc6 [mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token |
Critical EPSS 0.35% |
< 0.22.0 | 0.22.0 |
| GHSA-3r68-hf9h-887v MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass |
High EPSS 0.54% |
< 0.22.0 | 0.22.0 |
| GHSA-3r68-hf9h-887v MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass |
High EPSS 0.54% |
< 0.22.0 | 0.22.0 |
| GHSA-g5r6-gv6m-f5jv mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment |
High EPSS 0.48% |
< 0.22.0 | 0.22.0 |
| GHSA-g5r6-gv6m-f5jv mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment |
High EPSS 0.48% |
< 0.22.0 | 0.22.0 |
| GHSA-wm45-qh3g-v83f mcp-atlassian: Arbitrary server-side file read via attachment upload |
High EPSS 0.48% |
< 0.22.0 | 0.22.0 |
| GHSA-489g-7rxv-6c8q MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826) |
Medium EPSS 0.38% |
< 0.22.0 | 0.22.0 |
| GHSA-xjgw-4wvw-rgm4 MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment |
High EPSS 11.50% |
< 0.17.0 | 0.17.0 |
| GHSA-xjgw-4wvw-rgm4 MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment |
High EPSS 11.50% |
< 0.17.0 | 0.17.0 |
| GHSA-7r34-79r5-rcc9 MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers |
High EPSS 13.00% |
< 0.17.0 | 0.17.0 |
| GHSA-7r34-79r5-rcc9 MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers |
High EPSS 13.00% |
< 0.17.0 | 0.17.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor