MCP Atlassian resolves its SSRF allowlist once at middleware and again at connect, so DNS rebinding wins

NVD·medium signalXBlueskyLinkedInCopy link

CVE-2026-73497, published 2026-09-14, scores 6.5. From 0.17.0 until 0.22.0, `validate_url_for_ssrf` resolves the attacker-controlled X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url header host once at middleware time, and the connection re-resolves later. Same root cause as ContextForge's CVE-2026-53708 disclosed the same day: validate-then-reconnect without pinning the validated address.