Skip to content
OpenAdvisories

Vendor

donetick

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    Donetick Has Weak Default JWT Secret

    Donetick an open-source app for managing tasks and chores. Prior to version 0.1.44, the application uses JSON Web Tokens (JWT) for authentication, but the signing secret has a weak default value. While the responsibility is left to the system administrator to…