CVE-2025-53546 | RSSNext Folo auto-fix-lint-format-commit.yml pull_request_target inclusion of functionality from untrusted control sphere

A vulnerability was found in RSSNext Folo and classified as critical. Affected by this issue is the function pull_request_target of the file github/workflows/auto-fix-lint-format-commit.yml. The manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is handled as CVE-2025-53546. The attack may be launched remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.