AppFlowy-IO AppFlowy-Cloud

• CVE-2026-88898 Medium 6.5 AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint 0.4%
• CVE-2026-85622 Medium 5.3 AppFlowy-Cloud through 0.9.64 Cross-Workspace Collab Read via WebSocket 0.4%
• CVE-2026-85619 High 7.5 AppFlowy-Cloud 0.9.64 Cross-Workspace Collab Access via HTTP API 0.6%
• CVE-2026-16007 High 7.1 Authenticated SQL Injection in AppFlowy 0.3%