pkg:Go/github.com/nektos/act
3 total CVEsHIGH4
✅ Check your installed version
All known vulnerabilities
HIGH8.8CVE-2023-22726act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act from 0, < 0.2.40
HIGH8.8CVE-2023-22726act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act from 0, < 0.2.40
HIGH8.2CVE-2026-34042act: actions/cache server allows malicious cache injection in github.com/nektos/act from 0, < 0.2.86
HIGH8.2CVE-2026-34042act: actions/cache server allows malicious cache injection in github.com/nektos/act from 0, < 0.2.86
—act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
from 0, < 0.2.86
—act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
from 0, < 0.2.86