@nexus2520/jira-mcp-server
v1.0.1MCP server for Jira API integration - supports Jira Cloud
11
Total
3
Critical
4
High
4
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
13: import { toolDefinitions } from './tools/definitions.js';
14: // Get environment variables
>>> 15: const JIRA_EMAIL = process.env.JIRA_EMAIL;
16: const JIRA_API_TOKEN = process.env.JIRA_API_TOKEN;
17: const JIRA_BASE_URL = process.env.JIRA_BASE_URL || 'https://your-domain.atlassian.net';Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
14: // Get environment variables
15: const JIRA_EMAIL = process.env.JIRA_EMAIL;
>>> 16: const JIRA_API_TOKEN = process.env.JIRA_API_TOKEN;
17: const JIRA_BASE_URL = process.env.JIRA_BASE_URL || 'https://your-domain.atlassian.net';
18: // Validate required environment variablesReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
15: const JIRA_EMAIL = process.env.JIRA_EMAIL;
16: const JIRA_API_TOKEN = process.env.JIRA_API_TOKEN;
>>> 17: const JIRA_BASE_URL = process.env.JIRA_BASE_URL || 'https://your-domain.atlassian.net';
18: // Validate required environment variables
19: if (!JIRA_EMAIL || !JIRA_API_TOKEN) {Report false positiveDecoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��vW���kj{"�*'
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: ��ݕ឵:ڞȭ���
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.8 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.5 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 25, 2026 | critical | 11 | 47 | 0.00s |
| Feb 23, 2026 | critical | 11 | 47 | 0.00s |
| Feb 22, 2026 | critical | 11 | 47 | 0.00s |