Evidence · DiggingBeagle record
mcp-atlassian advisory GHSA-85p8-f4j5-j5jp
Original mcp-atlassian security advisory for mcp atlassian nat64 ipv6 allowed an internal ipv4 destination past ssrf checks.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original mcp-atlassian security advisory for mcp atlassian nat64 ipv6 allowed an internal ipv4 destination past ssrf checks.
Claim-level citations (2)
- supportsMCP Atlassian NAT64 IPv6 allowed an internal IPv4 destination past SSRF checks: The GHSA-85p8-f4j5-j5jp advisory documents that the SSRF filter assessed 64:ff9b::/96 as global without decoding embedded private IPv4; 0.24.1 adds this check.
Advisory: Summary and Details
- supportsMCP Atlassian NAT64 IPv6 allowed an internal IPv4 destination past SSRF checks: The disclosed precondition is: An affected MCP service permits attacker-influenced URLs and has a functioning NAT64 gateway.
Advisory: Affected configurations and reproduction