conflibot vulnerabilities

CVEs whose affected-version data names the conflibot package (actions). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55158Critical· 9.1

1w ago

Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests

Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled …

▾ Midnightwktk · conflibotEPSS 0.45%via NVD