As a distributed application, Bamboo's application-level security is important. This document contains links to version-specific security advisories and related documents for the Bamboo application.
![]() | This document is intended to provide information to system administrators about the security of the Bamboo application. It does not describe Bamboo's internal security model – user management and permissions – except as it relates to the overall application security. |
Finding and reporting a security vulnerability
Atlassian's approach to releasing patches is detailed in How to Report a Security Issue.
Publication of Bamboo security advisories
Atlassian's approach to publishing security advisories is detailed in Security Advisory Publishing Policy.
Severity levels
Atlassian's scale for measuring security issues is detailed in Severity Levels for Security Issues.
Our patch policy
Atlassian's approach to releasing patches is detailed in our Security Patch Policy.