Evidence · DiggingBeagle record
mcp-atlassian advisory GHSA-3c6h-qwx8-hjcm
Original mcp-atlassian security advisory for mcp atlassian ssrf dns pinning failed across an http proxy.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original mcp-atlassian security advisory for mcp atlassian ssrf dns pinning failed across an http proxy.
Claim-level citations (2)
- supportsMCP Atlassian SSRF DNS pinning failed across an HTTP proxy: The GHSA-3c6h-qwx8-hjcm advisory documents that local validation/pinning was undermined when a proxy re-resolved a trusted hostname; 0.24.1 constrains the trusted origin.
Advisory: Summary and Details
- supportsMCP Atlassian SSRF DNS pinning failed across an HTTP proxy: The disclosed precondition is: HTTP proxy is enabled and the attacker influences Atlassian service URL configuration.
Advisory: Affected configurations and reproduction