Change stream · Atlassian security advisories
Jira Software Data Center and Server: BASM (Broken Authentication & Session Management) Apache Tomcat Dependency (CVE-2026-53434)
15 Sep 2026 · Atlassian
Source excerpt
CVSS 9.1 (critical) · Atlassian assesses this third-party library as lower risk; the CVSS severity is retained · fixed in 9.12.37, 11.3.8, 10.3.23
A short excerpt. Read the linked source for the full article and context.