四度携手进博会，蔚来ES8出任第九届进博会VIP指定用车

yun2025

四度携手进博会，蔚来ES8出任第九届进博会VIP指定用车

Junie GitHub Action：代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行，并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时，可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围，风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4Nzk1NzgyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NzgxMg==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODI0MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MDg2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDcwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NzgwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjczNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MTkwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzQxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzQwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MTkwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MDgzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDY4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1Nzc4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjI1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODE3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDY3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI1OTUwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjIwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTMwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MTgwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzM1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjE4MA==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODA3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NzcyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MTczNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTIzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzI4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDMxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzI2OA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjU5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDMwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjU3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzI1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI1Nzk0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NzYyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDUyMA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NzkxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDUwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDIzNg==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjU0OA==.html
https://v.youku.com/v_show/id_XNjU3ODI1OTI4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDIyOA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjU0MA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjUzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDIzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjUzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzE4MA==.html
https://v.youku.com/v_show/id_XNjU3ODI1OTI2MA==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjUxNg==.html