desktime_time_tracking vulnerabilities

CVEs whose affected-version data names the desktime_time_tracking package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-10539Medium· 4.8

5mo ago

Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime update servers can return a malicious exec…

Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between the client and the DeskTime update servers can return a malicious exec…

▾ Sunlitdraugiemgroup · desktime_time_trackingEPSS 0.18%via NVD