Skip to content
OpenAdvisories

Vendor

toeverything

4 known vulnerabilities.

Products

AFFiNE 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-7702

    toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization

    A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the file /workspace/:workspaceId/:docId of the component Public Markdown Preview Endpoint. The manipulation results in authorization bypass. I…

    toeverything AFFiNE
  • Medium 6.9
    CVE-2026-25477

    AFFiNE: Open Redirect via Regex Bypass in redirect-proxy

    AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regu…

    toeverything AFFiNE