Issues resolved in 10.2.1
The Atlassian Confluence team is pleased to announce the release of Confluence 10.2.1, which is a bug-fix release.
Don't have Confluence 10.2 yet?
Check out the new features and other highlights in the Confluence 10.2 release notes.
We recommend you read the Confluence 10.2 release notes and you back up your confluence-home directory and database before upgrading.
This Confluence release includes updates to our Apache Tika dependency in response to CVE-2025-66516.
Our security team has assessed that the current scope of this CVE does not present the same critical risk in our products, as our use of the dependency doesn’t support the known path for exploitation.
The patch for CVE-2025-66516 is being released out of an abundance of caution.