CVE-2026-123851

MEDIUM NVD

CVSS Score 5.4

Severity MEDIUM

Published Nov 06, 2026

Vendor unknown

Description

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters