Getoutline Outline
15 CVEs affecting Getoutline Outline. Latest disclosed: 2026-05-11. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33640 | Critical | 9.8 | 2026-03-26 | Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identity Provider… |
CVE-2024-37829 | High | 8.8 | 2024-07-09 | An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link. |
CVE-2026-24901 | High | 8.1 | 2026-03-17 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document rest… |
CVE-2023-54331 | High | 7.8 | 2026-01-13 | Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges… |
CVE-2026-41649 | High | 7.7 | 2026-04-28 | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an… |
CVE-2025-64487 | High | 7.6 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document managemen… |
CVE-2024-40626 | High | 7.3 | 2024-07-16 | Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site… |
CVE-2025-58351 | Medium | 6.8 | 2025-09-03 | Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file… |
CVE-2024-37830 | Medium | 6.1 | 2024-07-09 | An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie. |
CVE-2026-44695 | Medium | 5.8 | 2026-05-11 | Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an unsigned… |
CVE-2026-25062 | Medium | 5.5 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from the impor… |
CVE-2023-3532 | Medium | 5.4 | 2023-07-07 | Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1. |
CVE-2022-2342 | Medium | 5.4 | 2022-07-07 | Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4. |
CVE-2025-68663 | Medium | 5.3 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism tha… |
CVE-2026-28506 | Medium | 4.3 | 2026-03-17 | Outline is a service that allows for collaborative documentation. Prior to 1.5.0, the events.list API endpoint, used for retrieving activity logs, contains a l… |