diff --git a/pkgs/by-name/de/deskflow/package.nix b/pkgs/by-name/de/deskflow/package.nix
index 6d90b1e8b126..c2fe3d22ce30 100644
--- a/pkgs/by-name/de/deskflow/package.nix
+++ b/pkgs/by-name/de/deskflow/package.nix
@@ -23,7 +23,6 @@
   libnotify,
   qt6,
   xkeyboard_config,
-  openssl,
   wayland-protocols,
   wayland,
   libsysprof-capture,
@@ -34,20 +33,18 @@
 
 stdenv.mkDerivation rec {
   pname = "deskflow";
-  version = "1.19.0";
+  version = "1.20.1";
 
   src = fetchFromGitHub {
     owner = "deskflow";
     repo = "deskflow";
     tag = "v${version}";
-    hash = "sha256-Jj2BNqz4pIJ468pywJRKu6GjgGX31GZZtDLHgcvC3JE=";
+    hash = "sha256-lX8K7HuC/Sxa5M0h+r5NmdFf032nVrE9JF6H+IBWPUA=";
   };
 
   postPatch = ''
     substituteInPlace src/lib/deskflow/unix/AppUtilUnix.cpp \
       --replace-fail "/usr/share/X11/xkb/rules/evdev.xml" "${xkeyboard_config}/share/X11/xkb/rules/evdev.xml"
-    substituteInPlace src/lib/gui/tls/TlsCertificate.cpp \
-      --replace-fail '"openssl"' '"${lib.getBin openssl}/bin/openssl"'
     substituteInPlace deploy/linux/deploy.cmake \
       --replace-fail 'message(FATAL_ERROR "Unable to read file /etc/os-release")' 'set(RELEASE_FILE_CONTENTS "")'
   '';
@@ -119,9 +116,5 @@ stdenv.mkDerivation rec {
       licenses.openssl
     ];
     platforms = lib.platforms.linux;
-    knownVulnerabilities = [
-      "CVE-2021-42072"
-      "CVE-2021-42073"
-    ];
   };
 }