Rushitgit

**Name of the Vulnerable Software and Affected Versions** MCP Atlassian versions prior to 0.22.0 **Description** Missing path validation in the `confluence upload attachment` function allows an authenticated client to read arbitrary files from the server filesystem and exfiltrate their contents to a Confluence page. The issue occurs because the `upload attachment()` function in `src/mcp atlassian/confluence/attachments.py` opens the caller-supplied `file path` variable without performing a boundary check to ensure the resolved path remains within the intended workspace. On Linux deployments, this can be used to access `/proc/self/environ`, exposing runtime secrets and API tokens. The vulnerable processing flow involves the `confluence upload attachment` tool, the `file path` variable, and the `open()` function. **Recommendations** Update MCP Atlassian to version 0.22.0. As a temporary workaround, restrict the use of the `confluence upload attachment` function to prevent unauthorized file uploads.

**Name of the Vulnerable Software and Affected Versions** OpenImageIO versions prior to 3.0.20.0 OpenImageIO versions prior to 3.1.15.0 OpenImageIO versions prior to 3.2.0.3-beta1 **Description** An issue exists when processing uncompressed 16-bit IFF images containing a z-buffer. The `IffInput::readimg()` function allocates a temporary scanline based on `m header.rgba count` but performs a copy operation using `m header.pixel bytes()`, which includes z-buffer bytes in its stride. This results in an oversized memcpy that reads beyond the temporary heap buffer, potentially causing a crash or the disclosure of adjacent heap data. **Recommendations** Update to version 3.0.20.0. Update to version 3.1.15.0. Update to version 3.2.0.3-beta1.