Change stream · Atlassian security advisories
Crowd Data Center: BASM (Broken Authentication & Session Management) org.apache.tomcat:tomcat-catalina Dependency (CVE-2026-65905)
20 Oct 2026 · Atlassian
Source excerpt
CVSS 9.8 (critical) · third-party library shipped by Atlassian; the CVSS severity is retained · fixed in 7.2.4
A short excerpt. Read the linked source for the full article and context.