CVE-2026-33620 | PinchTab up to 0.8.3 URL Query Parameter token get request method with sensitive query strings (GHSA-mrqc-3276-74f8)

A vulnerability has been found in PinchTab up to 0.8.3 and classified as problematic. This vulnerability affects unknown code of the component URL Query Parameter Handler. The manipulation of the argument token leads to use of get request method with sensitive query strings.

This vulnerability is documented as CVE-2026-33620. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.