Patch Ticker

Junie GitHub Action fork updates expose workflow credentials

Project secrets can be stolen through a GitHub automation tool.

Summary

In JetBrains Junie GitHub Action before 1.8.0, code could be run with workflow credentials via fork updates.

What to do

Update Junie GitHub Action to 1.8.0 or later.

Products and platforms

  • Junie GitHub Action

CVE IDs

Sources

Times

First published

First seen