after a thorough analysis, we recommend installing a minor update to the affected systems Jira, Confluence, Crowd, Bitbucket and Bamboo. We assessed the risk for Jira, Confluence, Crowd, Bitbucket and Bamboo as "medium". The fixed versions of Confluence, Crowd and Bitbucket were released in December 2025 and have already been applied to many systems.
Note: This is our general assessment and you should evaluate its applicability to your own IT environment. We only investigate/evaluate actively maintained LTS releases (except for Crowd & Fisheye/Crucible). If you are using a non-LTS release, please check additionally for your version or contact us via our Service Center.
If we are hosting your systems or proactively update your applications, we will directly communicate any information via the opened tickets (which have been created in the meantime) in our service center.