A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
Moderate severity
GitHub Reviewed
Published
Mar 22, 2026
in
pinchtab/pinchtab
•
Updated Mar 27, 2026
Give feedback on Dependabot alerts