Defined in 2 files
Last patched
upload_attachment in sooperset/mcp-atlassian was changed by 32 published CVE fixes in 2026, in 2 distinct patches that added or removed 448 lines in total.
The name occurs in 2 files: src/mcp_atlassian/confluence/attachments.py, src/mcp_atlassian/jira/attachments.py.
sooperset/mcp-atlassian has 34 CVEs with a located fix in total, so 94% of them touched this function.
Every published CVE whose fix changed upload_attachment, newest first, with the lines each fix touched.
CVE-2026-77246 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77246 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77248 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77248 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77256 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77256 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77249 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77249 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77259 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77259 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77268 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77268 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77247 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77247 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77272 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77272 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77269 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77269 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77266 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77266 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77255 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77255 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77262 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77262 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77254 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77254 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77253 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77253 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77257 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77257 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77261 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77261 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77260 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77260 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77271 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77271 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77242 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77242 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77243 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77243 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77251 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77251 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77252 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77252 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77267 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77267 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77250 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77250 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77244 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77244 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77265 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77265 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77270 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77270 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77258 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77258 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-77274 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-77274 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-73497 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-73497 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-73496 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-73496 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
CVE-2026-73498 · src/mcp_atlassian/confluence/attachments.py · lines 152–155 · +4 −3
CVE-2026-73498 · src/mcp_atlassian/jira/attachments.py · lines 384–387 · +4 −3
Get an alert when the next CVE fix lands in sooperset/mcp-atlassian, with the patched functions.
Monitor mcp-atlassian CVEsFunctions in the same files that CVE fixes also changed.
Functions in sooperset/mcp-atlassian changed by the most CVE fixes.
Common questions about CVE fixes to upload_attachment.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
