Release Notes

CVE-2025-58754 - Third-Party Library Vulnerability Update

A vulnerability was discovered within a third-party library that is used by Community Forums.

CVE:https://nvd.nist.gov/vuln/detail/CVE-2025-58754

Library Name: axios

Affected Library Version: >= 1.0.0, < 1.12.0, < 0.30.2

Our analysis confirms that Community Forums for Confluence Cloud does not use the affected components of the library, so it is not vulnerable to the reported issue.

Action Taken

To minimize the risk, we have updated the version of the library that Community Forums uses. We have selected a version that has no known vulnerabilities.

Recommendations

1. We always recommend updating to the latest version of Community Forums to ensure you are running the latest and most secure software.

2. More information about the vulnerability can be found here https://nvd.nist.gov/vuln/detail/CVE-2025-58754

CVE-2025-7783 - Third-Party Library Vulnerability Update

A vulnerability was discovered within a third-party library that is used by Mosaic.

CVE:https://nvd.nist.gov/vuln/detail/CVE-2025-7783

Library Name: form-data

Affected Library Version: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3

Our analysis confirms that Community Forums for Confluence Cloud does not use the affected components of the library, so is not vulnerable to the reported issue.

Action Taken

To minimize the risk, we have updated the version of the library that Community Forums uses. We have selected a version that has no known vulnerabilities.

Recommendations

1. We always recommend updating to the latest version of Community Forums to ensure you are running the latest and most secure software.

2. More information about the vulnerability can be found here https://nvd.nist.gov/vuln/detail/CVE-2025-7783