Approved changes feed: RSS · Atom

cpe:2.3:a:affine:affine:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorAffine (e3f8da36-fb63-51c2-8d21-802a775c7979)
ProductAffine (eca554c0-c000-5de9-a09d-0bd0ec3dfcd0)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25477 vulnerable 2026-06-08 07:53:19.853024 AFFiNE: Open Redirect via Regex Bypass in redirect-proxy
AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.26.0, there is an Open Redirect vulnerability located at the /redirect-proxy endpoint. The flaw exists in the domain validation logic, where an improperly anchored Regular Expression allows an attacker to bypass the whitelist by using malicious domains that end with a trusted string. This issue has been patched in version 0.26.0.
Published: 2026-03-02T19:14:05.003Z
Updated: 2026-03-02T20:30:32.614Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.