There is a new security advisory from Atlassian about a security vulnerability due to a template injection in admin contact form.