Atlassian security advisories

11 advisories · 9 critical or high in 12 months · latest Sep 15

Advisories page

11 advisories

Date	Advisory	Severity	Fixed in
Sep 15	Atlassian Confluence Data Center: denial of service High7.1Sep 15 CVE-2026-21588No fix yet	High7.1	No fix yet
Sep 15	Atlassian Confluence Data Center: improper authorization High7.1Sep 15 CVE-2026-21586No fix yet	High7.1	No fix yet
Sep 15	Atlassian Jira Service Management Data Center: improper authorization High7.1Sep 15 CVE-2026-21587No fix yet	High7.1	No fix yet
Aug 18	Atlassian Confluence: cross-site scripting Critical9.3Aug 18 CVE-2026-21580No fix yet	Critical9.3	No fix yet
Aug 18	Atlassian Crowd Data Center: improper authentication High8.8Aug 18 CVE-2026-21582No fix yet	High8.8	No fix yet
Aug 18	Atlassian Bamboo Data Center: improper authorization High7.6Aug 18 CVE-2026-21584No fix yet	High7.6	No fix yet
Jul 21	Atlassian Sourcetree for Mac: remote code execution High7.1Jul 21 CVE-2026-21575No fix yet	High7.1	No fix yet
Jul 21	Atlassian Confluence Data Center: denial of service High7.1Jul 21 CVE-2026-21577No fix yet	High7.1	No fix yet
Jul 21	Atlassian Confluence Data Center: information disclosure High8.2Jul 21 CVE-2026-21579No fix yet	High8.2	No fix yet
Oct 282020	gajira-comment GitHub action vulnerable to arbitrary code execution HighOct 28, 2020 CVE-2020-141892.0.2	High	2.0.2
Oct 282020	gajira-create GitHub action vulnerable to arbitrary code execution HighOct 28, 2020 CVE-2020-141882.0.1	High	2.0.1

About Atlassian

Security advisories Atlassian publishes for its own products.

www.atlassian.com/trust/security/advisory-publishing-policy Atlassian

Atlassian elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · TechConf

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.