github.com/nektos/act
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| act vulnerable to arbitrary file upload in artifact server | github.com/nektos/act | Go | High | Fix reported | |
| act: actions/cache server allows malicious cache injection | github.com/nektos/act | Go | High | Fix reported | |
| act: Unrestricted set-env and add-path command processing enables environment injection | github.com/nektos/act | Go | High | Fix reported |