Description
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Junie GitHub Action | < 1.6.4 | 1.6.4 |
Medium · 5.4
CVE-2026-123851
EUVD-2026-118354GHSA-p3f5-v6j7-7234
In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters
Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by JetBrains