CyberSecBulletin

RSSNext vulnerabilities

We track 1 vulnerability in RSSNext products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2025.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest RSSNext vulnerabilities

  • 9.1 Critical severity

    Folo: Inclusion of Functionality from Untrusted Control Sphere

    CVE-2025-53546RSSNext

    Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting