Paul Buonopane

**Name of the Vulnerable Software and Affected Versions** uncurl versions prior to 0.07 Parsec versions prior to 140-3 **Description** The issue is related to insufficient Origin header validation in the uncurl ws accept function, allowing remote attackers to bypass access restrictions for WebSocket API requests. This can lead to full control over the victim's computer in the context of Parsec. **Recommendations** For uncurl versions prior to 0.07, update to version 0.07 or later to resolve the issue. For Parsec versions prior to 140-3, update to version 140-3 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebSocket API until a patch is available.