PT-2022-19473

Name of the Vulnerable Software and Affected Versions github-action-merge-dependabot versions prior to 3.2.0 Description github-action-merge-dependabot is an action that automatically approves and merges dependabot pull requests PRs. Prior to version 3.2.0, it does not check if a commit created b...