Description
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Junie GitHub Action | < 1.8.0 | 1.8.0 |
High · 7.4
CVE-2026-123852
EUVD-2026-118355GHSA-mv6f-g9w3-f7mc
In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates
Published Nov 6, 2026 · Updated Nov 6, 2026 · Assigned by JetBrains