Evidence · DiggingBeagle record
mcp-atlassian advisory GHSA-823g-2jmv-9gmc
Original mcp-atlassian security advisory for mcp atlassian confluence downloads could overwrite executable module paths.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original mcp-atlassian security advisory for mcp atlassian confluence downloads could overwrite executable module paths.
Claim-level citations (2)
- supportsMCP Atlassian Confluence downloads could overwrite executable module paths: The GHSA-823g-2jmv-9gmc advisory documents that an attacker-selected download path bypassed the existing Jira-side guard; a test import executed a harmless overwritten-module marker. Version 0.24.1 adds confinement.
Advisory: Summary and Details
- supportsMCP Atlassian Confluence downloads could overwrite executable module paths: The disclosed precondition is: A Confluence attachment can be fetched into a directory adjacent to importable Python files.
Advisory: Affected configurations and reproduction