Change stream · Atlassian security advisories
Crucible Server: Cryptographic Failure org.bouncycastle:bcpkix-jdk18on, org.bouncycastle:bcutil-jdk18on Dependency (CVE-2026-71888)
20 Oct 2026 · Atlassian
Source excerpt
CVSS 8.7 (high) · third-party library shipped by Atlassian; the CVSS severity is retained · fixed in 4.9.15
A short excerpt. Read the linked source for the full article and context.