github.com/nektos/act vulnerabilities (Go)

3 vulnerabilities.

• github.com/nektos/act Go act: actions/cache server allows malicious cache injection CVE-2026-34042 Fix available 8.2 HighMarch 27, 2026
• github.com/nektos/act Go act: Unrestricted set-env and add-path command processing enables environment injection CVE-2026-34041 Fix available 7.7 HighMarch 27, 2026
• github.com/nektos/act Go Unrestricted file upload leading to privilege escalation in act CVE-2023-22726 Fix available 8.0 HighJanuary 20, 2023