Browse CVEs

MEDIUM 6.5 CVE-2026-44695 Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an … Outline 1.7.1+ Fix from $1,6002026-05-11 HIGH 7.7 CVE-2026-41649 Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.… Outline 1.7.0+ Fix from $1,9502026-04-28 CRITICAL 9.8 CVE-2026-33640 Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identit… Outline 1.6.0+ Fix from $2,3002026-03-26 HIGH 8.8 CVE-2026-24901 Outline is a service that allows for collaborative documentation. Prior to 1.4.0, an Insecure Direct Object Reference (IDOR) vulnerability in the doc… Outline 1.4.0+ Fix from $1,9502026-03-17 MEDIUM 5.5 CVE-2026-25062 Outline is a service that allows for collaborative documentation. Prior to 1.4.0, during the JSON import process, the value of attachments[].key from… Outline 1.4.0+ Fix from $1,6002026-02-11 MEDIUM 5.3 CVE-2025-68663 Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a vulnerability was found in Outline's WebSocket authentication mec… Outline 1.1.0+ Fix from $1,6002026-02-11 HIGH 7.6 CVE-2025-64487 Outline is a service that allows for collaborative documentation. Prior to 1.1.0, a privilege escalation vulnerability exists in the Outline document… Outline 1.1.0+ Fix from $1,9502026-02-11 HIGH 7.8 CVE-2023-54331 Outline 1.6.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system … Outline No fix yet Fix from $1,9502026-01-13 MEDIUM 6.8 CVE-2025-58351 Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates l… Outline 0.84.0+ Fix from $1,6002025-09-03 MEDIUM 5.4 CVE-2024-40626 Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering process that leads to a Stored … Outline 0.77.3+ Fix from $1,6002024-07-16 HIGH 8.8 CVE-2024-37829 An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link. Outline after 0.76.1 Fix from $1,9502024-07-09 MEDIUM 6.1 CVE-2024-37830 An issue in Outline <= v0.76.1 allows attackers to redirect a victim user to a malicious site via intercepting and changing the state cookie. Outline after 0.76.1 Fix from $1,6002024-07-09 MEDIUM 5.4 CVE-2023-3532 Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1. Outline 0.70.1+ Fix from $1,6002023-07-07 MEDIUM 5.4 CVE-2022-2342 Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to v0.64.4. Outline 0.64.4+ Fix from $1,6002022-07-07