Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-123851

HTML-Encoded Prompt Injection Evasion in JetBrains Junie GitHub Action

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Junie Github Action
CVE-2026-123852

Remote Code Execution via Fork Updates in JetBrains Junie GitHub Action

In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Jetbrains
Products
Junie Github Action