—
GO-2026-4891
act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
Quick fix
GO-2026-4891 — github.com/nektos/act: upgrade to the fixed version with the command below.
go get github.com/nektos/act@v0.2.86Details
act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act
Are you affected?
Enter the version of the package you're using.