CVE-2026-123851

Description

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

Affected Platforms

Weakness Type

CWE-180

References

• https://www.jetbrains.com/privacy-security/issues-fixed/