AppFlowy-IO AppFlowy-Cloud
3 known vulnerabilities in AppFlowy-IO AppFlowy-Cloud, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-88898 CVSS 7.1 high AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoint path, allowing…
- CVE-2026-85622 CVSS 6.0 medium AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establishing WebSocket connections in the…
- CVE-2026-85619 CVSS 7.7 high AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization checks, allowing attackers to…