agentprime: outlineEvery new CVE for outline.https://agentprime.io/CVE-2026-120489: Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Drafthttps://agentprime.io/advisories/CVE-2026-120489/https://agentprime.io/advisories/CVE-2026-120489/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:19 GMTCVECVE-2026-120449: Outline before 1.12.0 Improper Access Control via Public Document Shareshttps://agentprime.io/advisories/CVE-2026-120449/https://agentprime.io/advisories/CVE-2026-120449/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:29:08 GMTCVECVE-2026-113611: Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptionshttps://agentprime.io/advisories/CVE-2026-113611/https://agentprime.io/advisories/CVE-2026-113611/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:40:36 GMTCVECVE-2026-54573: Authorization Bypass in API Key/OAuth Scopes via Path Parsing Discrepancyhttps://agentprime.io/advisories/CVE-2026-54573/https://agentprime.io/advisories/CVE-2026-54573/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 15:59:35 GMTCVECVE-2026-44695: Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identityhttps://agentprime.io/advisories/CVE-2026-44695/https://agentprime.io/advisories/CVE-2026-44695/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:11:25 GMTCVECVE-2026-43889: Outline: Unauthorized Document Publication via Mixed collectionId+documentId Sharehttps://agentprime.io/advisories/CVE-2026-43889/https://agentprime.io/advisories/CVE-2026-43889/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:10:38 GMTCVECVE-2026-43888: Outline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Importhttps://agentprime.io/advisories/CVE-2026-43888/https://agentprime.io/advisories/CVE-2026-43888/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:09:42 GMTCVECVE-2026-43890: Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7)https://agentprime.io/advisories/CVE-2026-43890/https://agentprime.io/advisories/CVE-2026-43890/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:09:00 GMTCVECVE-2026-43886: Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Accesshttps://agentprime.io/advisories/CVE-2026-43886/https://agentprime.io/advisories/CVE-2026-43886/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:06:16 GMTCVECVE-2026-43887: Outline: Stored XSS via Comment Mentionshttps://agentprime.io/advisories/CVE-2026-43887/https://agentprime.io/advisories/CVE-2026-43887/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 21:05:42 GMTCVECVE-2026-41649: Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaceshttps://agentprime.io/advisories/CVE-2026-41649/https://agentprime.io/advisories/CVE-2026-41649/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2026 20:11:28 GMTCVECVE-2026-33640: Outline has a rate limit bypass that allows brute force of email login OTPhttps://agentprime.io/advisories/CVE-2026-33640/https://agentprime.io/advisories/CVE-2026-33640/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 20:56:37 GMTCVEcriticalCVE-2026-28506: Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Draftshttps://agentprime.io/advisories/CVE-2026-28506/https://agentprime.io/advisories/CVE-2026-28506/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 15:30:24 GMTCVECVE-2026-24901: Outline's IDOR allows unauthorized viewing and seizing of private deleted draftshttps://agentprime.io/advisories/CVE-2026-24901/https://agentprime.io/advisories/CVE-2026-24901/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 15:28:28 GMTCVECVE-2025-68663: Outline has a suspended user authentication bypass via WebSocket connectionshttps://agentprime.io/advisories/CVE-2025-68663/https://agentprime.io/advisories/CVE-2025-68663/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 20:29:40 GMTCVECVE-2025-64487: Outline is vulnerable to privilege escalation vulnerability in document sharinghttps://agentprime.io/advisories/CVE-2025-64487/https://agentprime.io/advisories/CVE-2025-64487/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 20:25:41 GMTCVECVE-2026-25062: Outline Affected an Arbitrary File Read via Path Traversal in JSON Importhttps://agentprime.io/advisories/CVE-2026-25062/https://agentprime.io/advisories/CVE-2026-25062/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 20:23:07 GMTCVECVE-2023-54331: Outline 1.6.0 - Unquoted Service Pathhttps://agentprime.io/advisories/CVE-2023-54331/https://agentprime.io/advisories/CVE-2023-54331/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jan 2026 22:52:06 GMTCVECVE-2025-58351: Outline's Local File Storage Feature can Cause CSP Bypasshttps://agentprime.io/advisories/CVE-2025-58351/https://agentprime.io/advisories/CVE-2025-58351/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Sep 2025 03:20:54 GMTCVECVE-2024-40626: Stored Cross-site Scripting (XSS) vulnerability in Outline editorhttps://agentprime.io/advisories/CVE-2024-40626/https://agentprime.io/advisories/CVE-2024-40626/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jul 2024 17:03:39 GMTCVE