Junie GitHub Action
by Jetbrains
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-123852 | Hig | 0.48 | 7.4 | — | Nov 6, 2026 | In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates | ||
| CVE-2026-123851 | Med | 0.35 | 5.4 | — | Nov 6, 2026 | In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters |
- risk 0.48cvss 7.4epss —
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
- risk 0.35cvss 5.4epss —
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters