outline vulnerabilities

CVEs whose affected-version data names the outline package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113611Medium· 4.9

today

Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions

Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving document contents because UserDeletedProcessor never disables their WebhookSubscription rows. Former admins wh…

▾ Sunlitoutline · outlinevia CVEORG