Approved changes feed: RSS · Atom

cpe:2.3:a:andrewhhan:browserpilot:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAndrewhhan (b3d00c91-f63e-5d6b-97a7-51ff4584408d)
ProductBrowserpilot (14a68d7b-9bf4-56e7-9bbd-ab97dc0eb8c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/handrew/browserpilot purl2cpe 2026-06-01 10:13:08.640840

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4218 vulnerable 2026-06-08 07:29:15.598684 handrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injection
MEDIUM (5.3)
A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gpt_selenium_agent.py. The manipulation of the argument instructions leads to code injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
Published: 2025-05-02T20:31:06.936Z
Updated: 2025-05-05T14:55:29.704Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.