Evidence · DiggingBeagle record
mcp-atlassian advisory GHSA-pwx2-x8g8-prvm
Original mcp-atlassian security advisory for mcp atlassian jira forms pat requests bypassed hardened ssrf handling.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original mcp-atlassian security advisory for mcp atlassian jira forms pat requests bypassed hardened ssrf handling.
Claim-level citations (2)
- supportsMCP Atlassian Jira Forms PAT requests bypassed hardened SSRF handling: The GHSA-pwx2-x8g8-prvm advisory documents that a bare requests.request followed upstream redirects without hardened DNS pinning; 0.24.1 aligns the transport.
Advisory: Summary and Details
- supportsMCP Atlassian Jira Forms PAT requests bypassed hardened SSRF handling: The disclosed precondition is: The MCP tool invokes Jira Forms API using personal access token or Basic authentication.
Advisory: Affected configurations and reproduction