CVE-2021-39116: Atlassian Jira Data Center

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the GIF Image Reader component. The affected versions are before version 8.13.14, and from version 8.14.0 before 8.19.0.

Affected products

• Atlassian Jira Data Center: before 8.13.14 (fixed in 8.13.14); from 8.14.0, before 8.19.0 (fixed in 8.19.0)
• Atlassian Jira Server: before 8.13.14 (fixed in 8.13.14); from 8.14.0, before 8.19.0 (fixed in 8.19.0)

Published 2021-09-08. Last modified 2026-06-17.