Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Atlassian third-party dependency security bulletin

Security Patch Release
First reported
Last updated
Happening score
H score 26
1 unique sources, 1 articles

Summary

Hide ▲

Atlassian released a Security Bulletin with fresh updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira to address 10 critical and 162 high-severity third-party dependency issues. The bundled fixes cover about 109 unique CVEs and reduce exposure to RCE, DoS, information theft, MitM, authentication bypass, and SSRF. The bulletin makes the patch cycle relevant across multiple Atlassian product lines because shared libraries spread the defects beyond a single application.

Related Happenings

Atlassian third-party dependency patches (multiple vulnerabilities)

Security Patch Release
H score26 First: 20.08.2026 15:24 Last: 20.08.2026 15:24 Sources 1

How related: On Tuesday, Atlassian published a Security Bulletin detailing 10 critical- and 162 high-severity issues in third-party dependencies, patched with fresh security updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira.

About this happening: Atlassian released fresh security updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira after finding 10 critical and 162 high-severity issu...

Open Happening

Timeline

  1. 20.08.2026 15:24 2 articles · 2h ago

    Atlassian publishes security bulletin for third-party dependency flaws

    Initial Disclosure

    Atlassian published a Security Bulletin on Tuesday covering 10 critical and 162 high-severity issues in third-party dependencies across Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira. The fresh security updates address approximately 109 unique CVEs, and many defects affect multiple products because the vulnerable libraries are shared.

    Show sources
    Open in new tab
  2. 20.08.2026 15:24 1 articles · 2h ago

    Splunk releases fixes for 150 vulnerabilities across Enterprise, SOAR, and Universal Forwarder

    Mitigation Patch Update

    Splunk announced fixes on Wednesday for at least 150 vulnerabilities across Splunk Enterprise, SOAR, Universal Forwarder, and associated apps and plugins. The release includes Splunk Enterprise versions 10.4.2, 10.2.6, 10.0.9, and 9.4.14, updates for Splunk Apps and Add-ons and Splunk SOAR, Enterprise Security version 8.6.1, SOAR Connectors, and a Universal Forwarder update that addresses OpenSSL weaknesses.

    Show sources
    Open in new tab