VulnWatch VulnWatch
← Back to dashboard
Medium nvd · CVE-2026-123851

CVE-2026-123851: In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

Published Nov 6, 2026 CVSS 5.4

In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters

Prompt Injection

Affected AI Products

prompt injection
View original source
Get the weekly digest. Every Monday: top AI security stories of the week. Free.