donetick vulnerabilities

CVEs whose affected-version data names the donetick package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112045Medium· 5.4PoC

yesterday

donetick History Deletion model.go CanDeleteHistory improper authorization

A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Deletion Handler. The manipulation of the argument AssignedTo…

▾ TwilightEPSS 0.24%via CVEORG