affine

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

affine records in CISA KEV

No affine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affine 2 records HIGH

Records

3 records

TI-2026-17555 CVE-2026-21853

AFFiNE: One-click Remote Code Execution through Custom URL Handling

HIGH 73

AFFiNE is an open-source, all-in-one workspace and an operating system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00713 Published 2026-03-02 Fixed in 0.25.4 CWE-94

TI-2026-42402 CVE-2026-59262 · GHSA-m4gp-5xh5-xhq4

AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Field

MEDIUM 64

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-07-08 Fixed in 0.26.3 CWE-862

TI-2026-20588 CVE-2026-25477

AFFiNE: Open Redirect via Regex Bypass in redirect-proxy

MEDIUM 64

AFFiNE is an open-source, all-in-one workspace and an operating system.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00202 Published 2026-03-02 Fixed in 0.26.0 CWE-601

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0