Go/github.com/pinchtab/pinchtab/cmd/pinchtab CVE-2026-33622: medium, EPSS 0.53%
A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.3 | - | 0.8.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w5pc-m664-r62v
- https://github.com/pinchtab/pinchtab/security/advisories/GHSA-w5pc-m664-r62v
- https://nvd.nist.gov/vuln/detail/CVE-2026-33622
- https://github.com/pinchtab/pinchtab
CVE-2026-33622 · published · modified · JSON