AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2026-123851mediumPrompt injection2026-11-06

CVE-2026-123851: In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

01.

What it is

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

02.

How to check

  1. Affected: JetBrains Junie GitHub Action before 1.6.4.
  2. Check the version pinned in your workflow files.
03.

How to fix

  1. Update the JetBrains Junie GitHub Action to 1.6.4 or later.
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.