PT-2026-56485

Name of the Vulnerable Software and Affected Versions AFFiNE affected versions not specified Description The histories GraphQL field does not validate Doc.Read permissions before exposing the edit history of a document. This allows authenticated workspace members to retrieve restricted content...