AppFlowy-IO
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AppFlowy-Cloud | 4 | – | Sep 10, 2026 |
Exploited and recent CVEs
- CVE-2026-88898 AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint 0.4%
- CVE-2026-85622 AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket 0.4%
- CVE-2026-85619 AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API 0.6%
- CVE-2026-16007 Authenticated SQL Injection in AppFlowy 0.3%