Change stream · Atlassian security advisories
Jira Software Data Center: jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (CVE-2026-54513)
15 Sep 2026 · Atlassian
Source excerpt
CVSS 8.1 (high) · fixed in 10.3.25, 11.3.11
A short excerpt. Read the linked source for the full article and context.