nektos/act Security Advisories | GitStock

high2026-03-27

act: actions/cache server allows malicious cache injection

GHSA-x34h-54cw-9825 · CVE-2026-34042

high2026-03-27

act: Unrestricted set-env and add-path command processing enables environment injection

GHSA-xmgr-9pqc-h5vw · CVE-2026-34041

high2023-01-20

act vulnerable to arbitrary file upload in artifact server

GHSA-pc99-qmg4-rcff · CVE-2023-22726