欧空局赫拉探测器首次近距离拍摄到Didymos双小行星系统

yun2025

欧空局赫拉探测器首次近距离拍摄到Didymos双小行星系统

Junie GitHub Action：代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行，并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时，可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围，风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4NzcwMDMwOA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMzQwNA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMzQwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NzI5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODAwMTYyNA==.html
https://v.youku.com/v_show/id_XNjU3ODAwMDQwMA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5OTA0NA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTgyOA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NDMwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5Mjc5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5Mjc5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjgwMA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODAwMDM4OA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5OTAyOA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NzI4MA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMzM3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5Mjc4NA==.html
https://v.youku.com/v_show/id_XNjU4NzY5ODY2MA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTgxMg==.html
https://v.youku.com/v_show/id_XNjU3ODAwMDM4NA==.html
https://v.youku.com/v_show/id_XNjU3Nzk5OTAyNA==.html
https://v.youku.com/v_show/id_XNjU4NzY5Mjc1Mg==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTgwNA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTc3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjczNg==.html
https://v.youku.com/v_show/id_XNjU4NzY5NzI0MA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NDI2NA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMzMzNg==.html
https://v.youku.com/v_show/id_XNjU4NzY5NTY4OA==.html
https://v.youku.com/v_show/id_XNjU3ODAwMDMyMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5ODYyNA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDIyNA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTc2OA==.html
https://v.youku.com/v_show/id_XNjU4NzY5MjcwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NTY2OA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NTY3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzY5ODYxNg==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDIxMg==.html
https://v.youku.com/v_show/id_XNjU4NzY5NzIyMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5ODYxMg==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDIwOA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NDI0OA==.html
https://v.youku.com/v_show/id_XNjU3ODAwMDMwMA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDIwNA==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDIwMA==.html
https://v.youku.com/v_show/id_XNjU4NzY5NzIxMg==.html
https://v.youku.com/v_show/id_XNjU4NzcwMTc1Mg==.html
https://v.youku.com/v_show/id_XNjU4NzcwMDE5Ng==.html
https://v.youku.com/v_show/id_XNjU4NzY5ODYwNA==.html