2.8.x Confluence
2.8.0
Security Issue Fix & Maintenance Release
Fixed a security issue. Please read this advisory for more details: https://wiki.resolution.de/doc/api-token-authentication/latest/security-advisories/2026-07-13-privilege-escalation-allowing-a-read-only-api-token-to-obtain-read-write-access-in-api-token-authentication-for-jira-confluence-and-bitbucket
Behavior change: A read-only API token can no longer be used to create API tokens with any scope. Previously, a read-only token could create other read-only tokens; that is no longer permitted. If you have automation or integrations that create tokens, ensure they authenticate using a Read & Write token.
Updated 3rd-party and internal libraries
