https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T09:27:11.532813+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374833 EUVD-2026-374833 2026-10-10T09:27:11.535020+00:00 EUVD-2026-374833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59262 fkie_cve-2026-59262 2026-10-10T09:27:11.535053+00:00

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs to access full edit histories including user names, emails, and timestamps of private pages they lack access to.

 https://cve.radiocsirt.org/vuln/ghsa-m4gp-5xh5-xhq4 GHSA-m4gp-5xh5-xhq4 2026-10-10T09:27:11.535084+00:00

AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs to access full edit histories including user names, emails, and timestamps of private pages they lack access to.