junie_github_action vulnerabilities
CVEs whose affected-version data names the junie_github_action package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-123851Medium· 5.4In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
▾ SunlitJetBrains · Junie GitHub Actionvia CVEORG
CVE-2026-123852High· 7.4In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
▾ TwilightJetBrains · Junie GitHub Actionvia CVEORG