Wktk Conflibot vulnerabilities

• wktk conflibot Conflibot: Command injection via crafted pull request branch names under pull_request_target CVE-2026-55158 Fix available 9.1 CriticalAugust 17, 2026