VYPR

Conflibot

by Wktk

Source repositories

CVEs (1)

  • CVE-2026-55158CriSep 15, 2026
    risk 0.52cvss 9.1epss 0.01

    Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled pull request head.ref value into strings…