Folo vulnerabilities

1 known vulnerability in Folo from RSSNext. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Folo: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2025-53546Jul 9, 2025RSSNext

  Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting