CVE-2026-54573 | | | 2026-06-25 | Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess function uses ctx.originalUrl to verify if… |
CVE-2026-44695 | Medium | 5.8 | 2026-05-11 | Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an unsigned… |
CVE-2026-43890 | High | 7.7 | 2026-05-11 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscription… |
CVE-2026-43889 | Medium | 6.5 | 2026-05-11 | Outline is a service that allows for collaborative documentation. Prior to 1.7.0, the shares.create API accepts both collectionId and documentId simultaneously… |
CVE-2026-43888 | High | 8.7 | 2026-05-11 | Outline is a service that allows for collaborative documentation. Prior to 1.7.0, ZipHelper.extract computes the extraction path for each entry by passing a fu… |
CVE-2026-43887 | High | 7.3 | 2026-05-11 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; howev… |
CVE-2026-43886 | High | 8.2 | 2026-05-11 | Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, a logic error in OAuthInterface.validateScope() uses Array.some() to va… |
CVE-2026-41649 | High | 7.7 | 2026-04-28 | Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an… |
CVE-2026-33640 | Critical | 9.8 | 2026-03-26 | Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identity Provider… |
CVE-2026-28506 | Medium | 4.3 | 2026-03-17 | Outline is a service that allows for collaborative documentation. Prior to 1.5.0, the events.list API endpoint, used for retrieving activity logs, contains a l… |
CVE-2026-24901 | High | 8.1 | 2026-03-17 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document rest… |
CVE-2026-25062 | Medium | 5.5 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from the impor… |
CVE-2025-68663 | Medium | 5.3 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism tha… |
CVE-2025-64487 | High | 7.6 | 2026-02-11 | Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document managemen… |
CVE-2025-58351 | Medium | 6.8 | 2025-09-03 | Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file… |
CVE-2024-40626 | High | 7.3 | 2024-07-16 | Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site… |
CVE-2023-3532 | Medium | 5.4 | 2023-07-07 | Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1. |
CVE-2022-2342 | Medium | 5.4 | 2022-07-07 | Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4. |