https://github.com/search?q=FB_SECRET&repo=&langOver...
Not really a "vulnerability" because you can't keep stupid people from giving out their secret key.