Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

outline — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in outline, with AI-generated Chinese analysis, references, and POCs.

Vendor: outline

CVE IDTitleCVSSSeverityPublished
CVE-2026-33640 Outline has a rate limit bypass that allows brute force of email login OTP CWE-307 9.1 -2026-03-26
CVE-2026-28506 Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts CWE-200 4.3 Medium2026-03-17
CVE-2026-24901 Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts CWE-639 8.1 High2026-03-17
CVE-2025-68663 Outline has a suspended user authentication bypass via WebSocket connections CWE-287 4.3AIMediumAI2026-02-11
CVE-2025-64487 Outline is vulnerable to privilege escalation vulnerability in document sharing CWE-269 7.6 High2026-02-11
CVE-2026-25062 Outline Affected an Arbitrary File Read via Path Traversal in JSON Import CWE-22 5.5 Medium2026-02-11
CVE-2023-54331 Outline 1.6.0 - Unquoted Service Path CWE-428 7.8 High2026-01-13
CVE-2025-58351 Outline's Local File Storage Feature can Cause CSP Bypass CWE-79 6.8 Medium2025-09-03
CVE-2024-40626 Stored Cross-site Scripting (XSS) vulnerability in Outline editor CWE-79 7.3 High2024-07-16

All 9 known CVE vulnerabilities affecting outline with full Chinese analysis, references, and POCs where available.