Junglewise Threat Intelligence

CVE-2023-22726: GO-2023-1504 - act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

CVE-2023-22726 · Severity: low · CVSS 3.1 · Published 2024-08-20

Technologies: github.com/nektos/act (Go). Vendors: Go.

Executive brief

act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

Affected products

Go github.com/nektos/act

Related threats

GO-2026-4891 - act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
GO-2026-4890 - act: actions/cache server allows malicious cache injection in github.com/nektos/act