Nektos

4 CVEs across 1 Nektos products. Browse Nektos vulnerabilities, severities, and proof-of-concept exploits.

Nektos products with known CVEs

ProductCVEs
Act4
Nektos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-76847High8.82026-08-24act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that bac…
CVE-2026-34042High8.22026-03-31act is a project which allows for local running of github actions. Prior to version 0.2.86, act's built in actions/cache server listens to connections on all i…
CVE-2026-34041Critical9.82026-03-31act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processes the deprecated ::set-env:: and ::add-…
CVE-2023-22726High8.02023-01-20act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github Action runs does not sanitize path inp…