AppFlowy-IO vulnerabilities
5 published CVEs name AppFlowy-IO among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-127203
AppFlowy Cloud 0.9.64 Stored XSS via Blob Upload Content-Type
AppFlowy-IO · AppFlowy-Cloud
Medium5.1 - CVE-2026-88898
AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint
AppFlowy-IO · AppFlowy-Cloud
High7.1 - CVE-2026-85622
AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket
AppFlowy-IO · AppFlowy-Cloud
Medium6.0 - CVE-2026-85619
AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API
AppFlowy-IO · AppFlowy-Cloud
High7.7 - CVE-2026-16007
Authenticated SQL Injection in AppFlowy
AppFlowy-IO · AppFlowy-Cloud
High7.1