AI Threat AlertSooperset
AI Threat Alert tracks 18 known AI/ML vulnerabilities affecting Sooperset products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Sooperset CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| MEDIUM | CVE-2026-73497 | MCP Atlassian: DNS rebinding SSRF reaches cloud metadata | mcp-atlassian | 6.5 |
| HIGH | CVE-2026-73496 | MCP Atlassian: path traversal enables server file disclosure | mcp-atlassian | 7.7 |
| HIGH | CVE-2026-77274 | mcp-atlassian: SSRF via backslash URL parsing confusion | mcp-atlassian | - |
| HIGH | CVE-2026-77258 | MCP Atlassian: path traversal exposes server files | mcp-atlassian | 7.7 |
| CRITICAL | CVE-2026-77244 | MCP Atlassian: unauthenticated access to operator Jira/Confluence | mcp-atlassian | 10.0 |
| MEDIUM | CVE-2026-77265 | MCP Atlassian: DNS-rebinding SSRF exposes internal services | mcp-atlassian | 5.9 |
| MEDIUM | CVE-2026-77270 | MCP Atlassian: path traversal in attachment upload leaks files | mcp-atlassian | 6.5 |
| MEDIUM | CVE-2026-77250 | MCP Atlassian: cleartext OAuth token file readable locally | mcp-atlassian | 6.1 |
| HIGH | CVE-2026-77242 | MCP Atlassian: DNS rebinding bypasses SSRF protection | mcp-atlassian | 7.5 |
| HIGH | CVE-2026-77260 | MCP Atlassian: path traversal in upload_attachment | mcp-atlassian | - |
| HIGH | CVE-2026-77261 | mcp-atlassian: SSRF via unvalidated redirects | mcp-atlassian | 7.1 |
| HIGH | CVE-2026-77267 | MCP Atlassian: SSRF via header URLs bypasses prior fix | mcp-atlassian | - |
| HIGH | CVE-2026-77243 | MCP Atlassian: missing authz lets clients call hidden tools | mcp-atlassian | 8.8 |
| MEDIUM | CVE-2026-77252 | MCP Atlassian: filter bypass exposes Jira/Confluence data | mcp-atlassian | 6.5 |
| HIGH | CVE-2026-77251 | MCP Atlassian: project/space filter bypass exposes data | mcp-atlassian | - |
| HIGH | CVE-2026-77271 | MCP Atlassian: path traversal enables code execution | mcp-atlassian | - |
| CRITICAL | CVE-2026-77254 | MCP Atlassian: missing auth exposes Jira/Confluence | mcp-atlassian | 9.1 |
| HIGH | CVE-2026-77256 | MCP Atlassian: world-readable OAuth token file exposure | mcp-atlassian | - |
Frequently asked questions
How many known vulnerabilities affect Sooperset?
18 AI/ML CVEs affecting Sooperset products are tracked, sourced from NVD and GitHub Advisory.
What Sooperset products are affected?
The CVEs below map to the Sooperset AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Sooperset vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Sooperset for new vulnerabilities?
AI Threat Alert tracks Sooperset continuously; a Pro subscription adds breaking alerts when new CVEs affecting Sooperset are published.
How do I assess Sooperset's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Sooperset issues first and judge the exposure for your stack.