1 matches found
CVE-2025-53546: Inclusion of Functionality from Untrusted Control Sphere
Folo organizes feeds content into one timeline. Using pullrequesttarget on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets from the base repo. By exploiting the vulnerability is possible to...
9.1CVSS5.8AI score0.00305EPSS
SaveExploits0References1
20