← All advisories

Medium severity5.4NVD Advisory· Published Nov 6, 2026

CVE-2026-123851

CVE-2026-123851

Description

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

Affected products

1

Jetbrains/Junie GitHub Actionllm-create
Range: <1.6.4

Patches

Vulnerability mechanics

References

1

www.jetbrains.com/privacy-security/issues-fixed/nvd

News mentions

0

No linked articles in our index yet.