act_runner vulnerabilities
1 known vulnerability in act_runner from Gitea. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest first
- 9.9 Critical severity
act_runner: Improper Privilege Management
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as