Wiki

outline/outline

The fastest knowledge base for growing teams. Beautiful, realtime collaborative, feature packed, and markdown compatible.

#react#wiki#nodejs#mobx#slack#javascript#docker

スコア

/ 100

Star

38,504

Fork

3,294

Open Issue

サイズ

310MB

言語

TypeScript ★

最終push

0 日前

Docker

🐳 両方 ★

採点内訳

過去CVE 13件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (TypeScript)

✓

オープンissue 40件

—

大規模 (310MB)

—

Docker 対応 (Dockerfile + compose)

✓

10k–50k: 中級 (★38,504)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (20 件)

MEDIUMGHSA-mjgw-5j7q-gv8v CVE-2026-446952026/5/7
Slack OAuth state can link a victim Outline account to an attacker Slack identity
MEDIUMGHSA-gf8h-cv9v-q4fw CVE-2026-438902026/5/7
IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7)
HIGHGHSA-7732-6qrg-wjf4 CVE-2026-438862026/5/7
OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access
HIGHGHSA-hw32-2v7j-mgqc CVE-2026-438882026/5/7
Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import
MEDIUMGHSA-rg4j-pmch-w6pm CVE-2026-438892026/5/7
Unauthorized Document Publication via Mixed collectionId+documentId Share
HIGHGHSA-rqrg-f3qc-xvgh CVE-2026-438872026/4/25
Stored XSS via Comment Mentions
MEDIUMGHSA-hqmp-r5jw-265r2026/4/25
Attachment Preset Size-Limit Bypass and Storage Accounting Corruption in Local-Storage Mode
MEDIUMGHSA-rg3q-3m93-rq7m2026/4/25
Insufficient JWT Verification in Rate Limiter Middleware Enables Denial of Service
HIGHGHSA-23jj-rp48-w7q7 CVE-2026-416492026/4/25
IDOR in document share creation allows unauthorized access to private documents across workspaces
CRITICALGHSA-cwhc-53hw-qqx6 CVE-2026-336402026/3/23
Rate limit bypass allows brute force of email login OTP
HIGHGHSA-gmr5-43f5-79f5 CVE-2026-249012026/3/16
IDOR allows unauthorized viewing and seizing of private deleted drafts
MEDIUMGHSA-69x7-6fcr-mm6g CVE-2026-285062026/3/16
Information Disclosure in Activity Logs allows User Enumeration of Private Drafts
MEDIUMGHSA-7r4f-3wjv-83xf CVE-2026-250622026/2/11
Arbitrary File Read via Path Traversal in JSON Import
MEDIUMGHSA-h9mv-vg9r-8c7c2025/11/16
Event Access Insecure Direct Object Reference (IDOR)
HIGHGHSA-c8xf-3j86-76862025/11/16
Privilege escalation vulnerability via document sharing functionality
HIGHGHSA-mx2c-3g2x-5m9m2025/11/16
Suspended user authentication bypass via WebSocket connections
HIGHGHSA-fp2g-2283-rwvj2025/9/2
Cross-site request forgery via sibling domains
MEDIUMGHSA-jfhx-7phw-9gq32025/9/2
Blind server-side request forgery
MEDIUMGHSA-gcj7-c9jv-fhgf CVE-2025-583512025/9/2
Local File Storage Leading to CSP bypass
HIGHGHSA-888c-mvg8-v6wh CVE-2024-406262024/7/16
Stored XSS vulnerability in Outline editor