Skip to content

conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target

Critical severity GitHub Reviewed Published Jun 10, 2026 in wktk/conflibot • Updated Aug 17, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts