Atlassian Jira January 2026 Security Update Advisory
Overview
Atlassian(https://www.atlassian.com/) has released a security update that addresses a vulnerability in a product it has been made. users of affected products are advised to update to the latest version.
Affected Products
Bamboo Data Center versions 9.6.1 and later and 9.6.15 and earlier
Bamboo Data Center 10.2.0 or later and 10.2.7 or earlier
Bamboo Server 9.6.1 or later and versions 9.6.15 or earlier
Bamboo Server 10.2.0 or later and 10.2.7 or earlier
Bitbucket Data Center version 2.1.1 or later
Bitbucket Data Center 6.0.5 version
Bitbucket Data Center 7.0.3 version
Bitbucket Data Center 8.19.0 Versions
Bitbucket Data Center 8.19.0 and later versions 8.19.1 and earlier
Bitbucket Data Center 8.19.1 Versions
Bitbucket Data Center 8.19.1 or later and 8.19.2 or earlier
Bitbucket Data Center 8.19.2 Versions
Bitbucket Data Center 8.19.2 or later and 8.19.3 or earlier
Bitbucket Data Center 8.19.3 Versions
Bitbucket Data Center 8.19.3 or later and 8.19.4 or earlier
Bitbucket Data Center 8.19.4 Versions
Bitbucket Data Center 8.19.4 or later and 8.19.5 or earlier
Bitbucket Data Center 8.19.5 Versions
Bitbucket Data Center 8.19.5 or later and 8.19.6 or earlier
Bitbucket Data Center 8.19.6 Versions
Bitbucket Data Center 8.19.6 or later and 8.19.7 or earlier
Bitbucket Data Center 8.19.7 Versions
Bitbucket Data Center 8.19.7 or later and 8.19.8 or earlier
Bitbucket Data Center 8.19.8 Versions
Bitbucket Data Center 8.19.8 or later and 8.19.9 or earlier
Bitbucket Data Center 8.19.9 Versions
Bitbucket Data Center 8.19.9 and later versions 8.19.10 and earlier
Bitbucket Data Center 8.19.10 Versions
Bitbucket Data Center 8.19.10 or later and 8.19.11 or earlier
Bitbucket Data Center 8.19.11 Versions
Bitbucket Data Center 8.19.11 or later and 8.19.12 or earlier
Bitbucket Data Center 8.19.12 Versions
Bitbucket Data Center 8.19.12 and later versions 8.19.13 and earlier
Bitbucket Data Center 8.19.13 Versions
Bitbucket Data Center 8.19.13 or later and 8.19.14 or earlier
Bitbucket Data Center 8.19.14 Versions
Bitbucket Data Center 8.19.14 or later and 8.19.15 or earlier
Bitbucket Data Center 8.19.15 Versions
Bitbucket Data Center 8.19.15 or later and 8.19.18 or earlier
Bitbucket Data Center 8.19.20 and later versions
Bitbucket Data Center 9.4.0 Versions
Bitbucket Data Center 9.4.0 or later and 9.4.1 or earlier
Bitbucket Data Center 9.4.1 or later and 9.4.2 or earlier
Bitbucket Data Center 9.4.2 or later and 9.4.3 or earlier
Bitbucket Data Center 9.4.3 or later and 9.4.6 or earlier
Bitbucket Data Center 9.4.8 or earlier
Bitbucket Data Center 9.6.0 or later and 9.6.2 or earlier
Bitbucket Data Center 9.6.4 and later versions
Bitbucket Server 2.1.1 version
Bitbucket Server 6.0.5 and later
Bitbucket Server 7.0.3 version
Bitbucket Server 8.19.0 version
Bitbucket Server 8.19.0 and later 8.19.1 and earlier versions
Bitbucket Server 8.19.1 Versions
Bitbucket Server 8.19.1 and later versions 8.19.2 and earlier
Bitbucket Server 8.19.2 Versions
Bitbucket Server 8.19.2 and later versions 8.19.3 and earlier
Bitbucket Server 8.19.3 Versions
Bitbucket Server 8.19.3 and later versions 8.19.4 and earlier
Bitbucket Server 8.19.4 Versions
Bitbucket Server 8.19.4 and later versions 8.19.5 and earlier
Bitbucket Server 8.19.5 Versions
Bitbucket Server 8.19.5 or later and 8.19.6 or earlier
Bitbucket Server 8.19.6 Versions
Bitbucket Server 8.19.6 and later versions 8.19.7 and earlier
Bitbucket Server 8.19.7 Versions
Bitbucket Server 8.19.7 or later and 8.19.8 or earlier
Bitbucket Server 8.19.8 Versions
Bitbucket Server 8.19.8 and later versions 8.19.9 and earlier
Bitbucket Server 8.19.9 Versions
Bitbucket Server 8.19.9 and later versions 8.19.10 and earlier
Bitbucket Server 8.19.10 Versions
Bitbucket Server 8.19.10 and later versions 8.19.11 and earlier
Bitbucket Server 8.19.11 Versions
Bitbucket Server 8.19.11 and later versions 8.19.12 and earlier
Bitbucket Server 8.19.12 Versions
Bitbucket Server 8.19.12 or later and 8.19.13 or earlier
Bitbucket Server 8.19.13 Versions
Bitbucket Server 8.19.13 or later and 8.19.14 or earlier
Bitbucket Server 8.19.14 Versions
Bitbucket Server 8.19.14 or later and 8.19.15 or earlier
Bitbucket Server 8.19.15 Versions
Bitbucket Server 8.19.15 or later and 8.19.18 or earlier
Bitbucket Server 8.19.20 and later versions
Bitbucket Server 9.4.0 Versions
Bitbucket Server 9.4.0 and later versions 9.4.1 and earlier
Bitbucket Server 9.4.1 or later and 9.4.2 or earlier
Bitbucket Server 9.4.2 or later and 9.4.3 or earlier
Bitbucket Server 9.4.3 or later and 9.4.6 or earlier
Bitbucket Server 9.4.8 and later versions
Bitbucket Server 9.6.0 or later and 9.6.2 or earlier
Bitbucket Server 9.6.4 and later versions
Crowd Data Center 5.3.0 version
Crowd Data Center 6.0.9 version
Crowd Data Center 6.1.0 version
Crowd Data Center 6.2.0 version
Crowd Data Center 6.3.0 or later and 6.3.1 or earlier
Jira Core Data Center 9.4.0 versions
Jira Core Data Center 9.12.0 version
Jira Core Data Center 9.17.0 version
Jira Core Data Center 10.0.0 version
Jira Core Data Center 10.1.0 version
Jira Core Data Center 10.2.0 version
Jira Core Data Center 10.3.0 version
Jira Core Data Center 10.7.0 version
Jira Core Server 9.4.0 version
Jira Core Server 9.12.0 version
Jira Core Server 9.17.0 version
Jira Core Server 10.0.0 version
Jira Core Server 10.1.0 version
Jira Core Server 10.2.0 version
Jira Core Server 10.3.0 version
Jira Core Server 10.7.0 version
Jira Service Management Data Center 5.4.0 version
Jira Service Management Data Center 5.12.0 version
Jira Service Management Data Center 5.12.0 and later versions 5.12.25 and earlier
Jira Service Management Data Center 5.13.0 or later and 5.13.1 or earlier
Jira Service Management Data Center 5.14.0 or later and 5.14.1 or earlier
Jira Service Management Data Center 5.15.2 and later versions
Jira Service Management Data Center 5.16.0 version
Jira Service Management Data Center 5.16.0 or later and 5.16.2 or earlier
Jira Service Management Data Center 5.17.0 versions
Jira Service Management Data Center 10.0.0 versions
Jira Service Management Data Center 10.1.0 or later and 10.1.1 or earlier
Jira Service Management Data Center 10.1.1 versions
Jira Service Management Data Center 10.2.0 versions
Jira Service Management Data Center 10.3.0 versions
Jira Service Management Data Center 10.3.0 and later but not earlier than 10.3.1
Jira Service Management Data Center 10.3.1 versions
Jira Service Management Data Center 10.3.1 and later but not earlier than 10.3.2
Jira Service Management Data Center 10.3.2 versions
Jira Service Management Data Center 10.3.2 and later but not earlier than 10.3.3
Jira Service Management Data Center 10.3.3 versions
Jira Service Management Data Center 10.3.3 and later versions 10.3.4 and earlier
Jira Service Management Data Center 10.3.4 versions
Jira Service Management Data Center 10.3.4 and later but not earlier than 10.3.5
Jira Service Management Data Center 10.3.5 versions
Jira Service Management Data Center 10.3.5 or later and 10.3.6 or earlier
Jira Service Management Data Center 10.3.6 versions
Jira Service Management Data Center 10.3.6 and later versions 10.3.7 and earlier
Jira Service Management Data Center 10.3.7 versions
Jira Service Management Data Center 10.3.7 and later versions 10.3.8 and earlier
Jira Service Management Data Center 10.3.8 versions
Jira Service Management Data Center 10.3.8 or later and 10.3.9 or earlier
Jira Service Management Data Center 10.3.9 versions
Jira Service Management Data Center 10.3.9 and later and 10.3.10 or earlier
Jira Service Management Data Center 10.3.10 versions
Jira Service Management Data Center 10.3.10 and later versions 10.3.11 and earlier
Jira Service Management Data Center 10.3.11 versions
Jira Service Management Data Center 10.3.11 and later versions 10.3.12 and earlier
Jira Service Management Data Center 10.3.12 versions
Jira Service Management Data Center 10.3.12 or later and 10.3.13 or earlier
Jira Service Management Data Center 10.3.13 versions
Jira Service Management Data Center 10.3.13 or later and 10.3.14 or earlier
Jira Service Management Data Center 10.3.14 versions
Jira Service Management Data Center 10.3.14 and later versions 10.3.15 and earlier
Jira Service Management Data Center 10.3.15 versions
Jira Service Management Data Center 10.4.0 versions
Jira Service Management Data Center 10.5.0 version
Jira Service Management Data Center 10.6.0 version
Jira Service Management Data Center 10.7.0 and later and 10.7.1 and earlier versions
Jira Service Management Data Center 10.7.1 versions
Jira Service Management Data Center 11.0.0 versions
Jira Service Management Data Center 11.0.0 and later versions 11.0.1 and earlier
Jira Service Management Data Center 11.0.1 versions
Jira Service Management Data Center 11.1.0 versions
Jira Service Management Data Center 11.1.0 and later versions 11.1.1 or earlier
Jira Service Management Data Center 11.1.1 versions
Jira Service Management Data Center 11.2.0 versions
Jira Service Management Server 5.4.0 version
Jira Service Management Server 5.12.0 version
Jira Service Management Server 5.12.0 and later versions 5.12.25 and earlier
Jira Service Management Server 5.13.0 or later and 5.13.1 or earlier
Jira Service Management Server 5.14.0 and later versions 5.14.1 and earlier
Jira Service Management Server 5.15.2 and later versions
Jira Service Management Server 5.16.0 version
Jira Service Management Server 5.16.0 or later and 5.16.2 or earlier
Jira Service Management Server 5.17.0 versions
Jira Service Management Server 10.0.0 versions
Jira Service Management Server 10.1.0 or later and 10.1.1 or earlier versions
Jira Service Management Server 10.1.1 versions
Jira Service Management Server 10.2.0 versions
Jira Service Management Server 10.3.0 versions
Jira Service Management Server 10.3.0 and later and 10.3.1 and earlier versions
Jira Service Management Server 10.3.1 versions
Jira Service Management Server 10.3.1 and later versions 10.3.2 and earlier
Jira Service Management Server 10.3.2 versions
Jira Service Management Server 10.3.2 or later and 10.3.3 or earlier
Jira Service Management Server 10.3.3 versions
Jira Service Management Server 10.3.3 and later versions 10.3.4 and earlier
Jira Service Management Server 10.3.4 versions
Jira Service Management Server 10.3.4 and later versions 10.3.5 and earlier
Jira Service Management Server 10.3.5 versions
Jira Service Management Server 10.3.5 or later and 10.3.6 or earlier
Jira Service Management Server 10.3.6 versions
Jira Service Management Server 10.3.6 and later versions 10.3.7 and earlier
Jira Service Management Server 10.3.7 versions
Jira Service Management Server 10.3.7 and later versions 10.3.8 and earlier
Jira Service Management Server 10.3.8 versions
Jira Service Management Server 10.3.8 or later and 10.3.9 or earlier
Jira Service Management Server 10.3.9 versions
Jira Service Management Server 10.3.9 or later and 10.3.10 or earlier
Jira Service Management Server 10.3.10 versions
Jira Service Management Server 10.3.10 and later versions 10.3.11 and earlier
Jira Service Management Server 10.3.11 versions
Jira Service Management Server 10.3.11 and later versions 10.3.12 and earlier
Jira Service Management Server 10.3.12 versions
Jira Service Management Server 10.3.12 and later versions 10.3.13 and earlier
Jira Service Management Server 10.3.13 versions
Jira Service Management Server 10.3.13 or later and 10.3.14 or earlier
Jira Service Management Server 10.3.14 versions
Jira Service Management Server 10.3.14 and later versions 10.3.15 and earlier
Jira Service Management Server 10.3.15 versions
Jira Service Management Server 10.4.0 versions
Jira Service Management Server 10.5.0 version
Jira Service Management Server 10.6.0 version
Jira Service Management Server 10.7.0 and later and 10.7.1 and earlier versions
Jira Service Management Server 10.7.1 versions
Jira Service Management Server 11.0.0 versions
Jira Service Management Server 11.0.0 or later and 11.0.1 or earlier versions
Jira Service Management Server 11.0.1 versions
Jira Service Management Server 11.1.0 versions
Jira Service Management Server 11.1.0 and later versions 11.1.1 or earlier
Jira Service Management Server 11.1.1 versions
Jira Service Management Server 11.2.0 versions
Jira Software Data Center 9.12.0 or later and 9.12.19 or earlier
Jira Software Data Center 9.12.22 or later and 9.12.25 or earlier
Jira Software Data Center 9.13.0 versions
Jira Software Data Center 9.14.0 version
Jira Software Data Center 9.15.0 and later versions and 9.15.2 and earlier versions
Jira Software Data Center 9.15.2 versions
Jira Software Data Center 9.16.0 versions
Jira Software Data Center 9.16.0 or later and 9.16.1 or earlier
Jira Software Data Center 9.17.0 versions
Jira Software Data Center 9.17.0 or later and 9.17.5 or earlier
Jira Software Data Center 10.0.0 versions
Jira Software Data Center 10.1.1 versions
Jira Software Data Center 10.2.0 version
Jira Software Data Center 10.3.0 version
Jira Software Data Center 10.3.0 and later and 10.3.1 and earlier versions
Jira Software Data Center 10.3.1 versions
Jira Software Data Center 10.3.1 and later versions 10.3.2 and earlier
Jira Software Data Center 10.3.2 versions
Jira Software Data Center 10.3.2 or later and 10.3.3 or earlier
Jira Software Data Center 10.3.3 versions
Jira Software Data Center 10.3.3 and later versions 10.3.4 and earlier
Jira Software Data Center 10.3.4 versions
Jira Software Data Center 10.3.4 and later versions 10.3.5 and earlier
Jira Software Data Center 10.3.5 versions
Jira Software Data Center 10.3.5 or later and 10.3.6 or earlier
Jira Software Data Center 10.3.6 versions
Jira Software Data Center 10.3.6 and later versions 10.3.7 and earlier
Jira Software Data Center 10.3.7 versions
Jira Software Data Center 10.3.7 and later versions 10.3.8 and earlier
Jira Software Data Center 10.3.8 versions
Jira Software Data Center 10.3.8 or later and 10.3.9 or earlier
Jira Software Data Center 10.3.9 versions
Jira Software Data Center 10.3.9 or later and 10.3.10 or earlier
Jira Software Data Center 10.3.10 versions
Jira Software Data Center 10.3.10 and later versions 10.3.11 and earlier
Jira Software Data Center 10.3.11 versions
Jira Software Data Center 10.3.11 and later versions 10.3.12 and earlier
Jira Software Data Center 10.3.12 versions
Jira Software Data Center 10.3.12 and later versions 10.3.13 and earlier
Jira Software Data Center 10.3.13 versions
Jira Software Data Center 10.3.13 or later and 10.3.14 or earlier
Jira Software Data Center 10.3.14 versions
Jira Software Data Center 10.3.14 and later versions 10.3.15 and earlier
Jira Software Data Center 10.3.15 versions
Jira Software Data Center 10.4.0 versions
Jira Software Data Center 10.5.0 versions
Jira Software Data Center 10.6.0 version
Jira Software Data Center 10.7.1 version
Jira Software Data Center 11.0.0 version
Jira Software Data Center 11.0.0 and later 11.0.1 and earlier versions
Jira Software Data Center 11.0.1 versions
Jira Software Data Center 11.1.0 versions
Jira Software Data Center 11.1.0 and later versions 11.1.1 or earlier
Jira Software Data Center 11.1.1 versions
Jira Software Data Center 11.2.0 versions
Jira Software Server 9.12.0 or later and 9.12.19 or earlier
Jira Software Server 9.12.22 or later and 9.12.25 or earlier
Jira Software Server 9.13.0 versions
Jira Software Server 9.14.0 and later versions
Jira Software Server 9.15.0 and later and 9.15.2 or earlier
Jira Software Server 9.15.2 versions
Jira Software Server 9.16.0 versions
Jira Software Server 9.16.0 and later and 9.16.1 and earlier versions
Jira Software Server 9.17.0 versions
Jira Software Server 9.17.0 and later versions 9.17.5 and earlier
Jira Software Server 10.0.0 versions
Jira Software Server 10.1.1 versions
Jira Software Server 10.2.0 versions
Jira Software Server 10.3.0 version
Jira Software Server 10.3.0 and later versions 10.3.1 and earlier
Jira Software Server 10.3.1 versions
Jira Software Server 10.3.1 and later and 10.3.2 and earlier versions
Jira Software Server 10.3.2 versions
Jira Software Server 10.3.2 or later and 10.3.3 or earlier
Jira Software Server 10.3.3 versions
Jira Software Server 10.3.3 and later versions 10.3.4 and earlier
Jira Software Server 10.3.4 versions
Jira Software Server 10.3.4 and later but not earlier than 10.3.5
Jira Software Server 10.3.5 versions
Jira Software Server 10.3.5 and later versions 10.3.6 and earlier
Jira Software Server 10.3.6 versions
Jira Software Server 10.3.6 and later versions 10.3.7 and earlier
Jira Software Server 10.3.7 versions
Jira Software Server 10.3.7 and later versions 10.3.8 and earlier
Jira Software Server 10.3.8 versions
Jira Software Server 10.3.8 or later and 10.3.9 or earlier
Jira Software Server 10.3.9 versions
Jira Software Server 10.3.9 and later and 10.3.10 or earlier
Jira Software Server 10.3.10 versions
Jira Software Server 10.3.10 and later versions 10.3.11 and earlier
Jira Software Server 10.3.11 versions
Jira Software Server 10.3.11 and later versions 10.3.12 and earlier
Jira Software Server 10.3.12 versions
Jira Software Server 10.3.12 and later versions 10.3.13 and earlier
Jira Software Server 10.3.13 versions
Jira Software Server 10.3.13 and later versions 10.3.14 and earlier
Jira Software Server 10.3.14 versions
Jira Software Server 10.3.14 and later versions 10.3.15 and earlier
Jira Software Server 10.3.15 versions
Jira Software Server 10.4.0 versions
Jira Software Server 10.5.0 versions
Jira Software Server 10.6.0 versions
Jira Software Server 10.7.1 version
Jira Software Server 11.0.0 version
Jira Software Server 11.0.0 and later 11.0.1 and earlier versions
Jira Software Server 11.0.1 versions
Jira Software Server 11.1.0 versions
Jira Software Server 11.1.0 and later versions 11.1.1 or earlier
Jira Software Server 11.1.1 versions
Jira Software Server 11.2.0 versions
Resolved Vulnerabilities
Vulnerability in Jira Software Data Center/Server that allows for a denial of service attack (CVE-2025-52434, CVSS 8.6) [1]
Cross-site scripting (XSS) dompurify dependency vulnerability in Jira Software Data Center/Server (CVE-2024-45801, CVSS 7.3) [2]
Vulnerability in Jira Software Data Center/Server that allows denial of service attacks (CVE-2021-3807, CVSS 7.5) [3]
Injection sha.js dependency vulnerability in Jira Software Data Center/Server (CVE-2025-9288, CVSS 7.4) [4] [4
Injected password-based dependency vulnerability in Jira Software Data Center/Server (CVE-2025-9287, CVSS 7.4) [5]
Vulnerability in Jira Software Data Center/Server that allows a denial of service attack (CVE-2024-21538, CVSS 7.7) [6] [7
Vulnerability in Jira Software Data Center/Server that could allow a denial of service attack (CVE-2025-15284, CVSS 8.7) [7] [7
Vulnerability Patches
Please follow the security advisory published on January 20 to update to the applicable version and the latest version.
Bamboo Data Center 9.6.16 version
Bamboo Data Center 10.2.8 version
Bamboo Server version 9.6.16
Bamboo Server 10.2.8 version
Bitbucket Data Center 8.19.16 version
Bitbucket Data Center 8.19.21 version
Bitbucket Data Center 9.4.4 version
Bitbucket Data Center 9.4.9 version
Bitbucket Data Center 9.6.5 version
Bitbucket Server 8.19.16 version
Bitbucket Server 8.19.21 version
Bitbucket Server 9.4.4 Versions
Bitbucket Server 9.4.9 version
Bitbucket Server 9.6.5 version
Crowd Data Center 5.3.8 version
Crowd Data Center 6.0.10 version
Crowd Data Center 6.1.6 version
Crowd Data Center 6.2.5 version
Crowd Data Center 6.3.2 version
Jira Core Data Center 9.12.25 version
Jira Core Data Center 10.3.8 version
Jira Core Data Center 10.7.2 version
Jira Core Server 9.12.25 version
Jira Core Server 10.3.8 version
Jira Core Server 10.7.2 version
Jira Service Management Data Center 5.12.25 or later and 5.12.26 or earlier
Jira Service Management Data Center 10.3.8 or later and 10.3.9 or earlier
Jira Service Management Data Center 10.3.16 and later versions
Jira Service Management Data Center 10.7.2 version
Jira Service Management Data Center 11.2.1 version
Jira Service Management Data Center 11.3.0 version
Jira Service Management Server 5.12.25 or later and 5.12.26 or earlier
Jira Service Management Server 10.3.8 or later and 10.3.9 or earlier
Jira Service Management Server 10.3.16 and later versions
Jira Service Management Server 10.7.2 version
Jira Service Management Server 11.2.1 version
Jira Service Management Server 11.3.0 version
Jira Software Data Center 9.12.26 version
Jira Software Data Center 10.3.9 version
Jira Software Data Center 10.3.15 or later and 10.3.16 or earlier
Jira Software Data Center 10.3.16 versions
Jira Software Data Center 11.0.0 versions
Jira Software Data Center 11.2.1 version
Jira Software Data Center 11.3.0 version
Jira Software Server 9.12.26 version
Jira Software Server 10.3.9 version
Jira Software Server 10.3.15 or later and 10.3.16 or earlier
Jira Software Server 10.3.16 versions
Jira Software Server 11.0.0 versions
Jira Software Server 11.2.1 versions
Jira Software Server 11.3.0 versions
Referenced Sites
[1] Denial of Service (DoS) org.apache.tomcat:tomcat-coyote Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26667
[2] XSS (Cross Site Scripting) dompurify Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26665
[3] Denial of Service (DoS) ansi-regex Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26663
[4] Injection sha.js Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26662
[5] Injection cipher-base Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26661
[6] DoS (Denial of Service) cross-spawn Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26656
[7] DoS (Denial of Service) qs Dependency in Jira Software Data Center and Server
https://jira.atlassian.com/browse/JSWSERVER-26654
[8] Atlassian Security Advisories & Bulletins