MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77262 · GHSA-p6hp-93wp-fh6p · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1776–1800 of 30,910 matching · newest first
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77262 · GHSA-p6hp-93wp-fh6p · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77268 · GHSA-4596-2p6p-28cv · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77259 · GHSA-6cr4-ccf3-x7h4 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77261 · GHSA-6529-c226-h328 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77270 · GHSA-f26r-j276-ggg4 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77265 · GHSA-49xv-9743-pw8w · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77266 · GHSA-mfv2-4wvm-9pgp · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77269 · GHSA-h7wj-5v37-59r2 · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77260 · GHSA-f4p7-qx46-wc5j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77257 · GHSA-mrq8-fv7v-hhjg · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77243 · GHSA-3r68-hf9h-887v · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77255 · GHSA-2xj6-xx86-cwwc · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77253 · GHSA-vc25-24vv-fxxm · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77251 · GHSA-w66g-j6c4-hcfc · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77246 · GHSA-wv8v-v4c5-v75j · amended
PyPI mcp-atlassian · Upgrade to 0.22.0 or later · < 0.22.0 · CVE-2026-77248 · GHSA-cc5h-2pwp-pvcc · amended
npm unleash-server · Upgrade to 8.0.3 or later · < 8.0.3 · CVE-2026-76910 · GHSA-8xcj-9hfr-fh9j · amended
npm unleash-server · Upgrade to 8.0.3 or later · < 8.0.3 · CVE-2026-76909 · GHSA-7hvx-28gp-mf6j · amended
npm @novu/js · Upgrade to 3.18.0 or later · <= 3.17.0 · CVE-2026-75510 · GHSA-8gr3-5j6f-25gp · amended
Maven org.graylog2:graylog2-server · Upgrade to 7.1.4, 7.0.9 or 6.3.14 by release line · >= 6.3.0, < 6.3.14; >= 7.0.0, < 7.0.9; >= 7.1.0, < 7.1.4 · CVE-2026-69190 · GHSA-m9c2-85gv-8xr5 · amended
Go github.com/emiago/sipgo · Upgrade to 1.4.3 or later · <= 1.4.2 · CVE-2026-77322 · GHSA-8h6x-h86x-75wh · amended
RubyGems mpxj +6 · Upgrade all 7 to 16.5.0 or later · >= 7.3.0, < 16.5.0 · CVE-2026-65829 · GHSA-7952-gx68-cjqr · amended
RubyGems mpxj +6 · Upgrade all 7 to 16.4.1 or later · >= 5.5.5, < 16.4.1 · CVE-2026-61570 · GHSA-5vvx-3h34-f3gj · amended
Go github.com/fabiolb/fabio · Upgrade to 1.7.2 or later · >= 1.6.6, <= 1.7.1 · CVE-2026-62987 · GHSA-fq95-v8xc-jm3v · amended
npm mppx · Upgrade to 0.8.2 or later · < 0.8.2 · CVE-2026-63628 · GHSA-vc9j-9wph-qghj · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.