PyPI/mcp-atlassian CVE-2026-27826: high 8.2, EPSS 13.68%
MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
Action: Upgrade mcp-atlassian to 0.17.0 or later.
pip install mcp-atlassian==0.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.0 | - |
Fixed versions
| 0.17.0 |
Sources
- osv: GHSA-7r34-79r5-rcc9
- https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-7r34-79r5-rcc9
- https://github.com/sooperset/mcp-atlassian/commit/5cd697dfce9116ef330b8dc7a91291640e0528d9
- https://github.com/sooperset/mcp-atlassian
CVE-2026-27826 · published · modified · JSON