https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:36:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-32812 EUVD-2026-32812 https://cve.radiocsirt.org/vuln/euvd-2026-32812 https://cve.radiocsirt.org/vuln/fkie_cve-2021-44042 <p>An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed (when the injected content does not match an existing process). A determined attacker could leverage this to execute JavaScript in the context of the Electron application.</p> <p>An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed (when the injected content does not match an existing process). A determined attacker could leverage this to execute JavaScript in the context of the Electron application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-44042 https://cve.radiocsirt.org/vuln/ghsa-vvrp-5qgw-cc82 <p>An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed (when the injected content does not match an existing process). A determined attacker could leverage this to execute JavaScript in the context of the Electron application.</p> <p>An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed (when the injected content does not match an existing process). A determined attacker could leverage this to execute JavaScript in the context of the Electron application.</p> https://cve.radiocsirt.org/vuln/ghsa-vvrp-5qgw-cc82 https://cve.radiocsirt.org/vuln/gsd-2021-44042 gsd-2021-44042 https://cve.radiocsirt.org/vuln/gsd-2021-44042