nektos vulnerabilities
4 published CVEs name nektos among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76847
act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend
nektos · act
High8.7 - CVE-2026-34042
act: actions/cache server allows malicious cache injection
nektos · act
High8.2 - CVE-2026-34041
act: Unrestricted set-env and add-path command processing enables environment injection
nektos · act
High7.7 - CVE-2023-22726
Unrestricted file upload leading to privilege escalation in act
nektos · act
High8.0