CVE-2026-33623

3 advisories.

Go/github.com/pinchtab/pinchtab/cmd/pinchtab CVE-2026-33623: medium 6.7

PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Action: Upgrade github.com/pinchtab/pinchtab/cmd/pinchtab to 0.8.5 or later.

go get github.com/pinchtab/pinchtab/cmd/pinchtab@v0.8.5

introduced	fixed	last affected
0	0.8.5	-

0.8.5

CVE-2026-33623 · published 2026-03-24T19:46:39Z · modified 2026-03-27T21:32:48.288546Z · JSON

PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution

Action: Upgrade github.com/pinchtab/pinchtab to 0.8.5 or later.

go get github.com/pinchtab/pinchtab@v0.8.5

introduced	fixed	last affected
0	0.8.5	-

0.8.5

CVE-2026-33623 · published 2026-03-24T19:46:39Z · modified 2026-03-27T21:32:48.288546Z · JSON

PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command Execution in github.com/pinchtab/pinchtab

Action: Upgrade github.com/pinchtab/pinchtab to 0.8.5 or later.

go get github.com/pinchtab/pinchtab@v0.8.5

introduced	fixed	last affected
0	0.8.5	-

0.8.5

CVE-2026-33623 · published 2026-03-26T20:33:02Z · modified 2026-03-26T21:04:04.217801Z · JSON