We recently updated our Security Bug Fix Policy to reflect our current vulnerability resolution timeframes. Most notably, we have shortened the time frame in which we aim to address all severities of cloud security vulnerabilities. We have made these changes to improve the overall security of our cloud products and to help to keep our customers safe.
To review the updates Service Level Objectives (SLOs) for any Security Vulnerabilities, please see: https://www.atlassian.com/trust/security/bug-fix-policy