CyberSecBulletin

ActivityWatch vulnerabilities

We track 1 vulnerability in ActivityWatch products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 7, 2022.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest ActivityWatch vulnerabilities

  • 9.6 Critical severity

    activitywatch: Authentication Bypass by Spoofing

    CVE-2022-31149ActivityWatchEPSS 1.28%

    ActivityWatch open-source automated time tracker. Versions prior to 0.12.0b2 are vulnerable to DNS rebinding attacks. This vulnerability impacts everyone running ActivityWatch and gives the attacker full access to the ActivityWatch REST API. Users should upgra