Skip to content
OpenAdvisories

Vendor

RSSNext

1 known vulnerabilities.

Products

Folo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-53546 Public exploit

    Folo allows secrets exfiltration via `pull_request_target`

    Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploitin…

    RSSNext Folo