GoSign Desktop versions through 2.4.1 disable TLS certificate validation when configured to use a proxy server. This behavior can allow bypassing integrity protection if a user selects an arbitrary proxy server that accepts untrusted or invalid server certificates. The vulnerability is limited by typical enterprise proxy configurations that do not permit such insecure connections. The issue is classified as low severity with a CVSS score of 3.2.