pip package · 2 known security advisories in the elsas feed · worst severity HIGH · last seen 2026-07-10.
→ Is your version of mcp-atlassian affected?check_affected on the MCP
endpoint https://elsas.it/mcp — free when you're not affected, micro-priced (capped at
$0.10) only on a confirmed match. Full remediation detail is in the paid get_today /
get_items.
| Advisory | Severity | CVSS | Affected versions | Fixed in | Date |
|---|---|---|---|---|---|
| GHSA-g5r6-gv6m-f5jv | HIGH | 7.7 | < 0.22.0 | 0.22.0 | 2026-07-10 |
| GHSA-wm45-qh3g-v83f | HIGH | 7.7 | < 0.22.0 | 0.22.0 | 2026-07-10 |
1. Open each linked advisory above — the primary source is the truth.
2. Each advisory was published in a daily report that is Ed25519-signed;
see status.json for the report_id.
3. Full signature-verification recipe →