Vulnerabilities fixed in Atlassian products

🗓️ 22 Jan 2026 09:03:42Reported by NCSCType

Atlassian fixed vulnerabilities in Oracle middleware based products after the January 2026 patch, preventing denial of service and data access.

Reporter	Title	Published	Views	Family All 3104
vulnersOsv	007putra-my-bot (=1.1.1), 03-asenkronsdasdsadavehttprequest (=1.0.0) +17741 more potentially affected by CVE-2022-25883 via semver (>=7.0.0 <=7.5.1)	21 Jun 202306:30	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0.8.18-p11 (=0.8.18-p12) +33559 more potentially affected by CVE-2022-25883 via semver (>=5.0.0 <=5.7.1)	25 Jan 202316:00	–	vulnersosv
vulnersOsv	ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +15688 more potentially affected by CVE-2025-48976 via commons-fileupload:commons-fileupload (>=1.0 <=1.5)	16 Jun 202515:32	–	vulnersosv
vulnersOsv	ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0 <=0.8.7), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0 <=0.8.7) +326 more potentially affected by CVE-2025-54988 via org.apache.tika:tika-parser-pdf-module (>=2.0.0-ALPHA <=3.2.1)	20 Aug 202521:30	–	vulnersosv
vulnersOsv	com.codbex.aion:codbex-aion-platform (>=0.5.6 <=0.5.7), com.codbex.aion:codbex-aion-platform-keycloack (>=0.5.6 <=0.5.7) +96 more potentially affected by CVE-2024-45296 +1 more via org.webjars.npm:path-to-regexp (>=0.1.7 <=8.2.0)	26 Mar 202618:34	–	vulnersosv
vulnersOsv	ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +15688 more potentially affected by CVE-2025-48976 via commons-fileupload:commons-fileupload (>=1.0 <=1.5)	16 Jun 202515:32	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +9094 more potentially affected by CVE-2022-25883 via semver (>=6.0.0 <=6.3.0)	25 Jan 202316:00	–	vulnersosv
vulnersOsv	07-cesar-router (=0.0.2), 07-custom-router (>=0.0.1 <=0.0.4) +1386 more potentially affected by CVE-2024-45296 via path-to-regexp (>=4.0.3 <=6.2.2)	9 Sep 202420:19	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +14282 more potentially affected by CVE-2024-21538 via cross-spawn (>=7.0.0 <=7.0.3)	8 Nov 202406:30	–	vulnersosv
vulnersOsv	com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.2 <=1.8.2), com.github.a-pz:struts2-thymeleaf3-plugin (>=1.0.3-RELEASE <=1.2.0-RELEASE) +164 more potentially affected by CVE-2025-64775 via org.apache.struts:struts2-core (>=2.5.1 <=2.5.33)	1 Dec 202518:30	–	vulnersosv

Source	Link
confluence	www.confluence.atlassian.com/security/security-bulletin-january-20-2026-1712324819.html

22 Jan 2026 09:03Current

8.3High risk

Vulners AI Score8.3

CVSS 49.4 - 10

CVSS 3.19.8

CVSS 27.8

CVSS 37.9

EPSS0.78785

SSVC