toeverything AFFiNE vulnerabilities
4 published CVEs name toeverything AFFiNE among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-7702
toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization
toeverything · AFFiNE
Medium6.9 - CVE-2026-25477
AFFiNE: Open Redirect via Regex Bypass in redirect-proxy
toeverything · AFFiNE
Medium6.9 - CVE-2026-21853
AFFiNE: One-click Remote Code Execution through Custom URL Handling
toeverything · AFFiNE
High8.8 - CVE-2025-11945
toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting
toeverything · AFFiNE
Medium5.1