Known Vulnerabilities for Workspace by Onlyoffice
Listed below are 1 of the newest known vulnerabilities associated with "Workspace" by "Onlyoffice".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-106560 json | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-modu... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-105763 json | Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL con... | Not Provided | 2026-10-06 | 2026-10-08 |
| CVE-2026-105761 json | Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoin... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105639 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any sub... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-105637 json | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/as... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105636 json | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-105633 json | Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in t... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105632 json | Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member a... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105631 json | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEnd... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-105630 json | Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a... | Not Provided | 2026-10-05 | 2026-10-05 |