Skip to content
OpenAdvisories

Vendor

affine

1 known vulnerabilities.

Products

monorepo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-59262

    AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Field

    AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs to access full edit …

    affine monorepo