A vulnerability was discovered in JetBrains Junie GitHub Action prior to version 1.6.4, where prompt injection protection could be bypassed using HTML-encoded characters. This allows an attacker to inject malicious input, potentially leading to unauthorized access or modification of sensitive data. The vulnerability affects users of JetBrains Junie GitHub Action who have not upgraded to version 1.6.4 or later.