CVE-2022-31149

CVE-2022-31149 affects the open‑source ActivityWatch time tracker. Versions before 0.12.0b2 are vulnerable to DNS rebinding, enabling an attacker to gain full access to the ActivityWatch REST API. Affected: ActivityWatch and its REST API; Root cause: DNS rebinding vulnerability. Impact: high (ful...