Outline

18 CVEs across 2 Outline products. Browse Outline vulnerabilities, severities, and proof-of-concept exploits.

Outline products with known CVEs

ProductCVEs
Outline16
Outline/outline2
Outline CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-545732026-06-25Outline is a service that allows for collaborative documentation. Prior to 1.8.0, the AuthenticationHelper.canAccess function uses ctx.originalUrl to verify if…
CVE-2026-44695Medium5.82026-05-11Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an unsigned…
CVE-2026-43890High7.72026-05-11Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscription…
CVE-2026-43889Medium6.52026-05-11Outline is a service that allows for collaborative documentation. Prior to 1.7.0, the shares.create API accepts both collectionId and documentId simultaneously…
CVE-2026-43888High8.72026-05-11Outline is a service that allows for collaborative documentation. Prior to 1.7.0, ZipHelper.extract computes the extraction path for each entry by passing a fu…
CVE-2026-43887High7.32026-05-11Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; howev…
CVE-2026-43886High8.22026-05-11Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, a logic error in OAuthInterface.validateScope() uses Array.some() to va…
CVE-2026-41649High7.72026-04-28Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an…
CVE-2026-33640Critical9.82026-03-26Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identity Provider…
CVE-2026-28506Medium4.32026-03-17Outline is a service that allows for collaborative documentation. Prior to 1.5.0, the events.list API endpoint, used for retrieving activity logs, contains a l…
CVE-2026-24901High8.12026-03-17Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the document rest…
CVE-2026-25062Medium5.52026-02-11Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from the impor…
CVE-2025-68663Medium5.32026-02-11Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mechanism tha…
CVE-2025-64487High7.62026-02-11Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document managemen…
CVE-2025-58351Medium6.82025-09-03Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file…
CVE-2024-40626High7.32024-07-16Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored Cross-Site…
CVE-2023-3532Medium5.42023-07-07Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.
CVE-2022-2342Medium5.42022-07-07Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4.