PT-2026-35686

Name of the Vulnerable Software and Affected Versions DeskTime Time Tracking App versions prior to 1.3.674 Description Improper TLS certificate validation allows attackers positioned in the network path between the client and the update servers to return a malicious executable during an update...

Jenkins ssh-agent Docker Image < 6.11.2 SSH Host Key Reuse

According to their self-reported version numbers, the jenkins/ssh-agent docker containers running on the remote web server are affected by an SSH host key reuse vulnerability. In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on...