CVE-2026-33622 PUBLISHED CVSS 6.099999904632568 MEDIUM

A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

Risk Scores

CVSS v4.0
6.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:N/SA:N

Affected Products

VendorProductVersions
github.compinchtab/pinchtab/cmd/pinchtab0.8.3, 0.8.3
pinchtabpinchtab>= 0.8.3, <= 0.8.5, >= 0.8.3, <= 0.8.5
github.compinchtab/pinchtab0.8.3, 0.8.3

Timeline

References

Open in Interactive Console →