Toonflow-app vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

TO

Product

Toonflow-app

by HBAI-Ltd · last CVE Oct 13, 2026

5

CVEs

0

On KEV

6.3

Max CVSS

2

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 0Medium 4Low 1

Severity

All severities5 Critical0 High0 Medium4 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Toonflow-app to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-7084	6.3	0%	Apr 27	HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery Affected: 1.1.0; 1.1.1
CVE-2026-109409	5.3	1%	Oct 13	HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.5; +3 more
CVE-2026-7085	5.0	0%	Apr 27	HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal Affected: 1.1.0; 1.1.1
CVE-2026-7086	4.3	0%	Apr 27	HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal Affected: 1.1.0; 1.1.1
CVE-2026-109526	3.3	0%	Oct 13	HBAI-Ltd Toonflow-app exportData Endpoint information disclosure Affected: 1.1.0; 1.1.1; 1.1.2; 1.1.3; 1.1.4; 1.1.5; +3 more