https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-44043.htmlhttps://patchthecve.com/cve/CVE-2021-44043.htmlWed, 17 Jun 2026 04:11:50 +0000MEDIUM 5.4: An issue was discovered in UiPath App Studio 21.4.4. There is a persistent XSS vulnerability in the file-upload functionality for uploading icons when attempting to create new Apps. An attacker with minimal privileges in the application can build their own App and upload a malicious file containing https://patchthecve.com/cve/CVE-2021-44042.htmlhttps://patchthecve.com/cve/CVE-2021-44042.htmlWed, 17 Jun 2026 04:11:50 +0000CRITICAL 9.8: An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed (when the injected content dhttps://patchthecve.com/cve/CVE-2021-44041.htmlhttps://patchthecve.com/cve/CVE-2021-44041.htmlWed, 17 Jun 2026 04:11:50 +0000CRITICAL 9.8: UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV fil