Change stream · Atlassian security advisories
Jira Software Data Center and Server: BASM (Broken Authentication & Session Management) Bouncy Castle Dependency (CVE-2026-12816)
15 Sep 2026 · Atlassian
Source excerpt
CVSS 8.7 (high) · third-party library shipped by Atlassian; the CVSS severity is retained · fixed in 9.12.39, 11.3.11, 10.3.25
A short excerpt. Read the linked source for the full article and context.