All products

github.com/pinchtab/pinchtab/cmd/pinchtab

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
PinchTab: OS Command Injection via Profile Name in Windows Cleanup Routine Enables Arbitrary Command ExecutionCVE-2026-33623 · GHSA-P8MM-644P-PHMHVersion ranges need review. github.com/pinchtab/pinchtab/cmd/pinchtabgithub.com/pinchtab/pinchtab Go Medium Fix reported
A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript ExecutionCVE-2026-33622 · GHSA-W5PC-M664-R62VVersion ranges need review. github.com/pinchtab/pinchtab/cmd/pinchtabgithub.com/pinchtab/pinchtab Go Medium No fix reported
PinchTab has SSRF with Full Response Exfiltration via Download HandlerCVE-2026-30834 · GHSA-RW8P-C6HF-Q3PG github.com/pinchtab/pinchtab/cmd/pinchtabgithub.com/pinchtab/pinchtab Go High Fix reported