国产大型邮轮“姐妹”在沪同港靠泊

yun2025

国产大型邮轮“姐妹”在沪同港靠泊

Junie GitHub Action：代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行，并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时，可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围，风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3ODY5OTQ0NA==.html
https://v.youku.com/v_show/id_XNjU4ODM5NDc5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY5NjUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODY5NjQzNg==.html
https://v.youku.com/v_show/id_XNjU3ODY5NjQyOA==.html
https://v.youku.com/v_show/id_XNjU3ODY5NjQyMA==.html
https://v.youku.com/v_show/id_XNjU3ODY5NzcxMg==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODY2MA==.html
https://v.youku.com/v_show/id_XNjU4ODM5MDA5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODU4MA==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODQxNg==.html
https://v.youku.com/v_show/id_XNjU4ODM4OTkxMg==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODQwOA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MDc2OA==.html
https://v.youku.com/v_show/id_XNjU4ODM4OTg5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODM5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM4ODMyMA==.html
https://v.youku.com/v_show/id_XNjU3ODY5NDU1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4Mzc0MA==.html
https://v.youku.com/v_show/id_XNjU4ODM4NjgzMg==.html
https://v.youku.com/v_show/id_XNjU3ODY5MzE3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4MDUwOA==.html
https://v.youku.com/v_show/id_XNjU4ODM4NTE3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM4NjYwNA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODY5MjkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODY5MDMzNg==.html
https://v.youku.com/v_show/id_XNjU4ODM4NDkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODY5MDI5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzI2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MzI1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODM3NTg0OA==.html
https://v.youku.com/v_show/id_XNjU3ODY4NzA4OA==.html
https://v.youku.com/v_show/id_XNjU3ODY4NTU4MA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NzA2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NDE2NA==.html
https://v.youku.com/v_show/id_XNjU4ODM4MDAyMA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NzAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODM3Njk0MA==.html
https://v.youku.com/v_show/id_XNjU4ODM3NDAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODMyMA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODE5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODY4NTA4OA==.html
https://v.youku.com/v_show/id_XNjU4ODM2Nzg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODY4ODA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY4MzcwNA==.html
https://v.youku.com/v_show/id_XNjU4ODM2MTU5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODY4MzY5Ng==.html
https://v.youku.com/v_show/id_XNjU4ODM2NzYxMg==.html
https://v.youku.com/v_show/id_XNjU4ODM3MDY2NA==.html