{"schema_version":1,"title":"mcp-atlassian (PyPI) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 32 vulnerabilities in mcp-atlassian (PyPI): 24 in the last 7 days and 32 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-77272, was published on 22 September 2026.","url":"https://junglewise.ai/threats/technologies/mcp-atlassian","json_url":"https://junglewise.ai/threats/technologies/mcp-atlassian.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/mcp-atlassian","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":19,"all_time":32,"critical":1,"exploited":0,"last_7_days":24,"last_30_days":26,"last_90_days":32,"last_365_days":32},"latest":[{"cve":"CVE-2026-77272","cvss":5.4,"epss":0.0024,"slug":"cve-2026-77272-atlassian-mcp-reflected-xss-in-oauth-setup-callback-handler","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth error query","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:51.177+00:00","url":"https://junglewise.ai/threats/cve-2026-77272-atlassian-mcp-reflected-xss-in-oauth-setup-callback-handler"},{"cve":"CVE-2026-77269","cvss":6.5,"epss":0.0038,"slug":"cve-2026-77269-atlassian-mcp-path-traversal-in-upload-attachment-allows","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the remediation for CV","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:50.92+00:00","url":"https://junglewise.ai/threats/cve-2026-77269-atlassian-mcp-path-traversal-in-upload-attachment-allows"},{"cve":"CVE-2026-77268","cvss":5.5,"epss":0.0011,"slug":"cve-2026-77268-atlassian-mcp-insecure-oauth-token-file-permissions","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the OAuth fallback tok","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:50.773+00:00","url":"https://junglewise.ai/threats/cve-2026-77268-atlassian-mcp-insecure-oauth-token-file-permissions"},{"cve":"CVE-2026-77266","cvss":6.5,"epss":0.0048,"slug":"cve-2026-77266-mcp-atlassian-path-traversal-in-upload-attachment","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment acce","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:50.627+00:00","url":"https://junglewise.ai/threats/cve-2026-77266-mcp-atlassian-path-traversal-in-upload-attachment"},{"cve":"CVE-2026-77262","cvss":8.6,"epss":0.0054,"slug":"cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.48+00:00","url":"https://junglewise.ai/threats/cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload"},{"cve":"CVE-2026-77259","cvss":7.7,"epss":0.0039,"slug":"cve-2026-77259-mcp-atlassian-arbitrary-file-read-via-confluence-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.327+00:00","url":"https://junglewise.ai/threats/cve-2026-77259-mcp-atlassian-arbitrary-file-read-via-confluence-upload"},{"cve":"CVE-2026-77257","cvss":4,"epss":0.0041,"slug":"cve-2026-77257-sooperset-mcp-atlassian-arbitrary-local-file-read-in-http-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.163+00:00","url":"https://junglewise.ai/threats/cve-2026-77257-sooperset-mcp-atlassian-arbitrary-local-file-read-in-http-upload"},{"cve":"CVE-2026-77255","cvss":8.6,"epss":0.004,"slug":"cve-2026-77255-atlassian-mcp-arbitrary-file-read-via-path-traversal-in-update","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:49.85+00:00","url":"https://junglewise.ai/threats/cve-2026-77255-atlassian-mcp-arbitrary-file-read-via-path-traversal-in-update"},{"cve":"CVE-2026-77253","cvss":7.1,"epss":0.004,"slug":"cve-2026-77253-mcp-atlassian-arbitrary-file-read-in-attachment-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence at","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:49.54+00:00","url":"https://junglewise.ai/threats/cve-2026-77253-mcp-atlassian-arbitrary-file-read-in-attachment-upload"},{"cve":"CVE-2026-77249","cvss":5.3,"epss":0.0033,"slug":"cve-2026-77249-atlassian-mcp-jira-user-permission-lookup-ssrf-via-unvalidated","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_","severity":"medium","exploited":false,"published_at":"2026-09-22T19:16:49.183+00:00","url":"https://junglewise.ai/threats/cve-2026-77249-atlassian-mcp-jira-user-permission-lookup-ssrf-via-unvalidated"},{"cve":"CVE-2026-77248","cvss":8.6,"epss":0.0042,"slug":"cve-2026-77248-atlassian-mcp-unauthenticated-arbitrary-file-read-in-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP tr","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:49.027+00:00","url":"https://junglewise.ai/threats/cve-2026-77248-atlassian-mcp-unauthenticated-arbitrary-file-read-in-upload"},{"cve":"CVE-2026-77247","cvss":7.5,"epss":0.0045,"slug":"cve-2026-77247-sooperset-mcp-atlassian-arbitrary-file-upload-to-jira-confluence","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence up","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:48.877+00:00","url":"https://junglewise.ai/threats/cve-2026-77247-sooperset-mcp-atlassian-arbitrary-file-upload-to-jira-confluence"},{"cve":"CVE-2026-77246","cvss":7.4,"epss":0.0022,"slug":"cve-2026-77246-mcp-atlassian-http-server-local-file-exfiltration-via-unvalidated","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport depl","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:48.73+00:00","url":"https://junglewise.ai/threats/cve-2026-77246-mcp-atlassian-http-server-local-file-exfiltration-via-unvalidated"},{"cve":"CVE-2026-77274","cvss":4,"epss":0.0047,"slug":"cve-2026-77274-atlassian-mcp-ssrf-protection-bypass-via-url-parser-mismatch","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:19.253+00:00","url":"https://junglewise.ai/threats/cve-2026-77274-atlassian-mcp-ssrf-protection-bypass-via-url-parser-mismatch"},{"cve":"CVE-2026-77271","cvss":4,"epss":0.0042,"slug":"cve-2026-77271-atlassian-mcp-path-traversal-bypass-leading-to-rce","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path def","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:19.107+00:00","url":"https://junglewise.ai/threats/cve-2026-77271-atlassian-mcp-path-traversal-bypass-leading-to-rce"},{"cve":"CVE-2026-77270","cvss":6.5,"epss":0.004,"slug":"cve-2026-77270-atlassian-mcp-arbitrary-file-read-via-upload-attachment-tools","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluenc","severity":"medium","exploited":false,"published_at":"2026-09-22T18:17:18.947+00:00","url":"https://junglewise.ai/threats/cve-2026-77270-atlassian-mcp-arbitrary-file-read-via-upload-attachment-tools"},{"cve":"CVE-2026-77267","cvss":4,"epss":0.0034,"slug":"cve-2026-77267-mcp-atlassian-incomplete-ssrf-remediation-in-url-header","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-U","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:18.803+00:00","url":"https://junglewise.ai/threats/cve-2026-77267-mcp-atlassian-incomplete-ssrf-remediation-in-url-header"},{"cve":"CVE-2026-77265","cvss":5.9,"epss":0.0026,"slug":"cve-2026-77265-atlassian-mcp-server-ssrf-via-dns-rebinding-in-header","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira o","severity":"medium","exploited":false,"published_at":"2026-09-22T18:17:18.647+00:00","url":"https://junglewise.ai/threats/cve-2026-77265-atlassian-mcp-server-ssrf-via-dns-rebinding-in-header"},{"cve":"CVE-2026-77261","cvss":7.1,"epss":0.0026,"slug":"cve-2026-77261-mcp-atlassian-ssrf-protection-bypass-in-basic-auth-and-oauth","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook i","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:18.497+00:00","url":"https://junglewise.ai/threats/cve-2026-77261-mcp-atlassian-ssrf-protection-bypass-in-basic-auth-and-oauth"},{"cve":"CVE-2026-77260","cvss":4,"epss":0.0032,"slug":"cve-2026-77260-atlassian-mcp-server-arbitrary-file-read-via-unconstrained-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jir","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:18.347+00:00","url":"https://junglewise.ai/threats/cve-2026-77260-atlassian-mcp-server-arbitrary-file-read-via-unconstrained-upload"},{"cve":"CVE-2026-77251","cvss":4,"epss":0.0025,"slug":"cve-2026-77251-mcp-atlassian-jql-cql-filter-bypass-in-jira-and-confluence-search","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:17.883+00:00","url":"https://junglewise.ai/threats/cve-2026-77251-mcp-atlassian-jql-cql-filter-bypass-in-jira-and-confluence-search"},{"cve":"CVE-2026-77250","cvss":6.1,"epss":0.0012,"slug":"cve-2026-77250-mcp-atlassian-oauth-fallback-token-storage-plaintext-exposure","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a p","severity":"medium","exploited":false,"published_at":"2026-09-22T18:17:17.72+00:00","url":"https://junglewise.ai/threats/cve-2026-77250-mcp-atlassian-oauth-fallback-token-storage-plaintext-exposure"},{"cve":"CVE-2026-77244","cvss":10,"epss":0.0028,"slug":"cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport acc","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:17.56+00:00","url":"https://junglewise.ai/threats/cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport"},{"cve":"CVE-2026-77243","cvss":8.8,"epss":0.0036,"slug":"cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOL","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:17.41+00:00","url":"https://junglewise.ai/threats/cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call"},{"cve":"CVE-2026-73497","cvss":6.5,"epss":0.0038,"slug":"cve-2026-73497-mcp-atlassian-dns-rebinding-ssrf-via-header-validation-bypass","title":"MCP Atlassian DNS rebinding SSRF via header validation bypass","severity":"medium","exploited":false,"published_at":"2026-09-14T20:16:50.993+00:00","url":"https://junglewise.ai/threats/cve-2026-73497-mcp-atlassian-dns-rebinding-ssrf-via-header-validation-bypass"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-21","critical":1,"exploited":0,"vulnerabilities":24}],"related":[{"name":"open-webui (PyPI)","slug":"open-webui","vulnerabilities":156,"url":"https://junglewise.ai/threats/technologies/open-webui"},{"name":"nltk (PyPI)","slug":"nltk","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/nltk"},{"name":"picklescan (PyPI)","slug":"picklescan","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/picklescan"},{"name":"openbabel (PyPI)","slug":"openbabel","vulnerabilities":48,"url":"https://junglewise.ai/threats/technologies/openbabel"},{"name":"apache-superset (PyPI)","slug":"apache-superset","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/apache-superset"},{"name":"apache-airflow (PyPI)","slug":"apache-airflow","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/apache-airflow"},{"name":"tensorflow-gpu (PyPI)","slug":"tensorflow-gpu","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/tensorflow-gpu"},{"name":"tensorflow-cpu (PyPI)","slug":"tensorflow-cpu","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/tensorflow-cpu"},{"name":"weblate (PyPI)","slug":"weblate","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/weblate"},{"name":"crawl4ai (PyPI)","slug":"crawl4ai","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/crawl4ai"},{"name":"moin (PyPI)","slug":"moin","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/moin"},{"name":"opencv-contrib-python (PyPI)","slug":"opencv-contrib-python","vulnerabilities":24,"url":"https://junglewise.ai/threats/technologies/opencv-contrib-python"}],"technology":{"hub":true,"name":"mcp-atlassian (PyPI)","slug":"mcp-atlassian","vendor":{"name":"PyPI","slug":"pypi","url":"https://junglewise.ai/threats/vendors/pypi"},"aliases":[],"homepage":"https://pypi.org/project/mcp-atlassian/","repo_url":"https://github.com/modelcontextprotocol/servers/tree/main/src/atlassian","description":"A Python package providing integration for Atlassian products.","url":"https://junglewise.ai/threats/technologies/mcp-atlassian"},"most_severe":[{"cve":"CVE-2026-77244","cvss":10,"epss":0.0028,"slug":"cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport acc","severity":"critical","exploited":false,"published_at":"2026-09-22T18:17:17.56+00:00","url":"https://junglewise.ai/threats/cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport"},{"cve":"CVE-2026-77243","cvss":8.8,"epss":0.0036,"slug":"cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOL","severity":"high","exploited":false,"published_at":"2026-09-22T18:17:17.41+00:00","url":"https://junglewise.ai/threats/cve-2026-77243-mcp-atlassian-tool-authorization-bypass-in-tools-call"},{"cve":"CVE-2026-77262","cvss":8.6,"epss":0.0054,"slug":"cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.48+00:00","url":"https://junglewise.ai/threats/cve-2026-77262-sooperset-mcp-atlassian-path-traversal-in-confluence-upload"},{"cve":"CVE-2026-77248","cvss":8.6,"epss":0.0042,"slug":"cve-2026-77248-atlassian-mcp-unauthenticated-arbitrary-file-read-in-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP tr","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:49.027+00:00","url":"https://junglewise.ai/threats/cve-2026-77248-atlassian-mcp-unauthenticated-arbitrary-file-read-in-upload"},{"cve":"CVE-2026-77255","cvss":8.6,"epss":0.004,"slug":"cve-2026-77255-atlassian-mcp-arbitrary-file-read-via-path-traversal-in-update","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:49.85+00:00","url":"https://junglewise.ai/threats/cve-2026-77255-atlassian-mcp-arbitrary-file-read-via-path-traversal-in-update"},{"cve":"CVE-2026-73496","cvss":7.7,"epss":0.0048,"slug":"cve-2026-73496-mcp-atlassian-path-traversal-in-attachment-upload","title":"MCP Atlassian path traversal in attachment upload","severity":"high","exploited":false,"published_at":"2026-09-14T20:16:50.833+00:00","url":"https://junglewise.ai/threats/cve-2026-73496-mcp-atlassian-path-traversal-in-attachment-upload"},{"cve":"CVE-2026-73498","cvss":7.7,"epss":0.0048,"slug":"cve-2026-73498-mcp-atlassian-arbitrary-file-read-in-attachment-upload","title":"MCP Atlassian arbitrary file read in attachment upload","severity":"high","exploited":false,"published_at":"2026-08-12T22:17:16.973+00:00","url":"https://junglewise.ai/threats/cve-2026-73498-mcp-atlassian-arbitrary-file-read-in-attachment-upload"},{"cve":"CVE-2026-77259","cvss":7.7,"epss":0.0039,"slug":"cve-2026-77259-mcp-atlassian-arbitrary-file-read-via-confluence-upload","title":"MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_atta","severity":"high","exploited":false,"published_at":"2026-09-22T19:16:50.327+00:00","url":"https://junglewise.ai/threats/cve-2026-77259-mcp-atlassian-arbitrary-file-read-via-confluence-upload"},{"cvss":7.7,"slug":"sooperset-mcp-atlassian-path-traversal-in-confluence-upload-attachment-2100e080","title":"sooperset mcp-atlassian path traversal in confluence_upload_attachment","severity":"high","exploited":false,"published_at":"2026-07-10T19:34:37+00:00","url":"https://junglewise.ai/threats/sooperset-mcp-atlassian-path-traversal-in-confluence-upload-attachment-2100e080"},{"cvss":7.7,"slug":"sooperset-mcp-atlassian-arbitrary-file-read-in-attachment-upload-53f7fd36","title":"sooperset mcp-atlassian arbitrary file read in attachment upload","severity":"high","exploited":false,"published_at":"2026-07-10T19:34:30+00:00","url":"https://junglewise.ai/threats/sooperset-mcp-atlassian-arbitrary-file-read-in-attachment-upload-53f7fd36"}],"generated_at":"2026-09-26T13:07:00.120236+00:00"}