toeverything AFFiNE

• CVE-2026-7702 Medium 5.3 toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization 0.3%
• CVE-2026-25477 Medium 6.9 AFFiNE: Open Redirect via Regex Bypass in redirect-proxy 0.2%
• CVE-2026-21853 High 8.8 AFFiNE: One-click Remote Code Execution through Custom URL Handling 0.7%
• CVE-2025-11945 Low 3.5 toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting 0.3%