MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77258 · GHSA-93xw-j965-9mx3 · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
26–50 of 76 matching · newest first
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77258 · GHSA-93xw-j965-9mx3 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77250 · GHSA-g5xv-mhgm-v5f6 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77249 · GHSA-v9m3-wfh8-5646 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77247 · GHSA-f6pj-qv47-g96w · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77244 · GHSA-wrhw-j3f9-8vc6 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77274 · GHSA-hgcf-4mq8-5266 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77271 · GHSA-6vmq-24h2-pj7j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77267 · GHSA-5wf4-jqxh-8gm3 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77272 · GHSA-g2r2-3j32-j27x · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77262 · GHSA-p6hp-93wp-fh6p · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77268 · GHSA-4596-2p6p-28cv · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77259 · GHSA-6cr4-ccf3-x7h4 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77261 · GHSA-6529-c226-h328 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77270 · GHSA-f26r-j276-ggg4 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77265 · GHSA-49xv-9743-pw8w · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77266 · GHSA-mfv2-4wvm-9pgp · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77269 · GHSA-h7wj-5v37-59r2 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77260 · GHSA-f4p7-qx46-wc5j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77257 · GHSA-mrq8-fv7v-hhjg · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77243 · GHSA-3r68-hf9h-887v · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77255 · GHSA-2xj6-xx86-cwwc · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77253 · GHSA-vc25-24vv-fxxm · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77251 · GHSA-w66g-j6c4-hcfc · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77246 · GHSA-wv8v-v4c5-v75j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77248 · GHSA-cc5h-2pwp-pvcc · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.