围绕三大核心主线 一周逾550家上市公司迎来投资者调研

yun2025

围绕三大核心主线 一周逾550家上市公司迎来投资者调研

Junie GitHub Action：代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行，并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时，可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围，风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高，所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/be1fcdf5fee2914fb51972ee263602b7
https://lightroom.adobe.com/shares/fa06cc7b14827a45bc3a8a95550e831d
https://lightroom.adobe.com/shares/1c917ceb529fb44a93163ec7ccbef3f3
https://lightroom.adobe.com/shares/efe273027a9cdc488f09b501e50915a1
https://lightroom.adobe.com/shares/231518edd55daf45b6022eafe3327687
https://lightroom.adobe.com/shares/69fb52d1bd27c148bd124ac63b1e089d
https://lightroom.adobe.com/shares/aa3d6e63598e6c4486d5e5c8bd1fcc59
https://lightroom.adobe.com/shares/df56f318bae77c4bb4f73afc3bcc046c
https://lightroom.adobe.com/shares/7a52024bb266b94c846aca96463da36e
https://lightroom.adobe.com/shares/11dd2c582e8e5e4ea091668de9ce27ef
https://lightroom.adobe.com/shares/b7395b3eb3c10e40baf58f2441a27501
https://lightroom.adobe.com/shares/599d739bbe9898439c9d34428e3bca5b
https://lightroom.adobe.com/shares/f6e39de20f68584fb6dd8ef740290dc6
https://lightroom.adobe.com/shares/6ba773052c3473449897e293e4fc6778
https://lightroom.adobe.com/shares/7eb06da23090cf469558c42544cbf67f
https://lightroom.adobe.com/shares/e1946768af8a864eacc1304eb971b915
https://lightroom.adobe.com/shares/ae51142f5c8ae14c9413fb9ffb41b30a
https://lightroom.adobe.com/shares/611d7e9a59ef7646a4c3ca49804ea185
https://lightroom.adobe.com/shares/a92cf5bcf0799a4cad1531aa7ff2bbd8
https://lightroom.adobe.com/shares/ce28f417dc61fd45b18b11de85c1622f
https://lightroom.adobe.com/shares/9dc23a2f8f99bd4ab79c574169b8e7e1
https://lightroom.adobe.com/shares/d2febaf623b22c4dbb3c9386879752a0
https://lightroom.adobe.com/shares/4d34fedade593e45b55d043a14acf773
https://lightroom.adobe.com/shares/c027f8d842a72845bc6fe3386c5e4c9a
https://lightroom.adobe.com/shares/53b350a42fc5964aade00395802dec48
https://lightroom.adobe.com/shares/90496a1cb1da3b4e93f4998fc2f06777
https://lightroom.adobe.com/shares/2e6ddb107046ab419f4bc133c7ab1ecc
https://lightroom.adobe.com/shares/08a84a001a37194db82114aea6c4d84c
https://lightroom.adobe.com/shares/a49bbf730b3e5246aa62f3e75205861a
https://lightroom.adobe.com/shares/84f85962a2ddcc4dbb11cd6af37c2d6c
https://lightroom.adobe.com/shares/3aa62d8fd1daa241b70de5cb9ea2e0dd
https://lightroom.adobe.com/shares/3eb726597a0d134886d0f7ad2287cd69
https://lightroom.adobe.com/shares/66d006b60179dd499a743eb0e4f2d1d0
https://lightroom.adobe.com/shares/2250902a768548429fb1112cac77bbe9
https://lightroom.adobe.com/shares/07769297fdf22842a0360d1f64fb3257
https://lightroom.adobe.com/shares/db99c52774125c4788e76a727e87a951
https://lightroom.adobe.com/shares/83c05cae281d27499c7f27c1320db2ed
https://lightroom.adobe.com/shares/053c5202ee2cd848851642f88e3790e9
https://lightroom.adobe.com/shares/ffcf7801c03cfe42a40087fbd32673c4
https://lightroom.adobe.com/shares/96056fc367b14448813dd223f8fe6d20
https://lightroom.adobe.com/shares/d5a269ae054ae04abb16d5e36602acef
https://lightroom.adobe.com/shares/22c2db7bc0a17841b75f894f3ef794d0
https://lightroom.adobe.com/shares/668436fa2a8dc24db6ae3da378c7be46
https://lightroom.adobe.com/shares/609aef6c9efb2749ab7e4a75dd9e8c17
https://lightroom.adobe.com/shares/2f3b1c7868865c4487e45ad950b9dc02
https://lightroom.adobe.com/shares/1e5f08f7bea2a847bfdbab34b0bad885
https://lightroom.adobe.com/shares/500b37e2f559e148b322b97b812eda2d
https://lightroom.adobe.com/shares/a26934eafdbdb946a74fa7e9835cf48b
https://lightroom.adobe.com/shares/eba49e9054d60f4db100f5f6b4793c30
https://lightroom.adobe.com/shares/859452416d4aba41b6b6bbeb00c851ec