nektos act

• CVE-2026-76847 High 8.8 act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend 0.4%
• CVE-2026-34042 High 8.2 act: actions/cache server allows malicious cache injection 0.5%
• CVE-2026-34041 Critical 9.8 act: Unrestricted set-env and add-path command processing enables environment injection 0.6%
• CVE-2023-22726 High 8.0 Unrestricted file upload leading to privilege escalation in act 1.3%