Skip to content
Ttoeverything
Products
| Product | CVEs | Exploited | Latest |
|---|
| AFFiNE | 4 | – | May 3, 2026 |
Exploited and recent CVEs
-
CVE-2026-7702
Medium 5.3
toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization
0.3%
-
CVE-2026-25477
Medium 6.9
AFFiNE: Open Redirect via Regex Bypass in redirect-proxy
0.2%
-
CVE-2026-21853
High 8.8
AFFiNE: One-click Remote Code Execution through Custom URL Handling
0.7%
-
CVE-2025-11945
Low 3.5
toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting
0.3%