SieveLLM 보안 모니터

모니터

오늘 볼 것
추세
검색

내 환경

내 스택
자산 감시
설정·연결

정보

소개·판정 규칙
RSS
llms.txt

jk 이동 / 검색

Sieve내 스택에 해당하는 LLM 보안 이슈만검색 /

검색

데이터: OSV.dev(GitHub Advisory 포함) · CISA KEV. 판정은 버전 범위 비교로만 하고, 원문 링크를 항상 함께 둡니다.

모니터

오늘 볼 것
추세
검색

내 환경

내 스택
자산 감시
설정·연결

정보

소개·판정 규칙
RSS
llms.txt

“mcp-atlassian” 검색 · Sieve

30건 · AI 관련·실제 악용·최신 순

높음취약점

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-f4p7-qx46-wc5j · 2026. 10. 2.

높음취약점

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-wv8v-v4c5-v75j · 2026. 10. 2.

중간취약점

MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-g5xv-mhgm-v5f6 · 2026. 10. 2.

높음취약점

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-cc5h-2pwp-pvcc · 2026. 10. 2.

높음취약점

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-6vmq-24h2-pj7j · 2026. 10. 2.

높음취약점

MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-w66g-j6c4-hcfc · 2026. 10. 2.

높음취약점

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-f6pj-qv47-g96w · 2026. 10. 2.

높음취약점

mcp-atlassian has an incomplete SSRF remediation

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-5wf4-jqxh-8gm3 · 2026. 10. 2.

중간취약점

MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-49xv-9743-pw8w · 2026. 10. 2.

높음취약점

MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-3r68-hf9h-887v · 2026. 10. 2.

높음취약점

MCP Atlassian: SSRF Protection Bypass

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-hgcf-4mq8-5266 · 2026. 10. 2.

중간취약점

MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-g2r2-3j32-j27x · 2026. 10. 2.

중간취약점

MCP Atlassian: Insecure File Permissions on OAuth Token Storage

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-4596-2p6p-28cv · 2026. 10. 2.

높음취약점

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-6cr4-ccf3-x7h4 · 2026. 10. 2.

높음취약점

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-p6hp-93wp-fh6p · 2026. 10. 2.

치명취약점

[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-wrhw-j3f9-8vc6 · 2026. 10. 2.

높음취약점

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-vc25-24vv-fxxm · 2026. 10. 2.

중간취약점

MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-f26r-j276-ggg4 · 2026. 10. 2.

높음취약점

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-2xj6-xx86-cwwc · 2026. 10. 2.

높음취약점

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-mrq8-fv7v-hhjg · 2026. 10. 2.

중간취약점

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-h7wj-5v37-59r2 · 2026. 10. 2.

중간취약점

MCP Atlassian: Incomplete fix for GHSA-7r34-79r5-rcc9: redirect-based SSRF via unhooked requests session in Jira user-permission lookup

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-v9m3-wfh8-5646 · 2026. 10. 2.

높음취약점

MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-93xw-j965-9mx3 · 2026. 10. 2.

높음취약점

MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-6529-c226-h328 · 2026. 10. 2.

중간취약점

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-mfv2-4wvm-9pgp · 2026. 10. 2.

높음취약점

mcp-atlassian: Arbitrary server-side file read via attachment upload

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-wm45-qh3g-v83f · 2026. 9. 18.

중간취약점

MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-489g-7rxv-6c8q · 2026. 9. 18.

높음취약점

mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment

PyPI mcp-atlassian · 0.22.0에서 수정 · GHSA-g5r6-gv6m-f5jv · 2026. 9. 10.

높음취약점

MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

PyPI mcp-atlassian · 0.17.0에서 수정 · GHSA-7r34-79r5-rcc9 · 2026. 7. 14.

치명취약점

MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

PyPI mcp-atlassian · 0.17.0에서 수정 · GHSA-xjgw-4wvw-rgm4 · 2026. 6. 29.

최근 14일

AI·LLM 관련 항목

전체61

치명·높음33

악성 패키지2

실제 악용0

자주 나온 패키지

최근 28일

mcp-atlassianPyPI25
vllmPyPI23
open-webuiPyPI18
litellmPyPI

수집 상태

OSV 30분 · KEV 6시간 주기

CISA KEV2026. 10. 27.
OSV · crates.io2026. 10. 27.
OSV · Go2026. 10. 27.
OSV · npm2026. 10. 27.
OSV · PyPI2026. 10. 27.

13

pydantic-aiPyPI9