Wktk Conflibot vulnerabilities

CVE-2026-55158 [CRITICAL] CWE-78 CVE-2026-55158: Conflibot warns in advance when merging a pull request will cause conflicts in other open pull reque Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled pull request head.ref value into strings passed to exec. In the documented pull_request_target configuration, an