Evidence · DiggingBeagle record
mcp-atlassian advisory GHSA-xv8h-26ch-vfh9
Original mcp-atlassian security advisory for mcp atlassian tool methods skipped project and space allowlists.
- Published
- Nov 8, 2026
- Source role
- primary disclosure
Evidence record
Original mcp-atlassian security advisory for mcp atlassian tool methods skipped project and space allowlists.
Claim-level citations (2)
- supportsMCP Atlassian tool methods skipped project and space allowlists: The GHSA-xv8h-26ch-vfh9 advisory documents that most read-by-key and mutation tools failed to consult those filters; the 0.24.1 release applies per-resource checks.
Advisory: Summary and Details
- supportsMCP Atlassian tool methods skipped project and space allowlists: The disclosed precondition is: An operator restricts the MCP server to selected Jira projects or Confluence spaces while its backing Atlassian credential remains broader.
Advisory: Affected configurations and reproduction