outline CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM outline CVE published 2026-10-20

CVE-2026-113611

CVE-2026-113611 is an information disclosure vulnerability in Outline before version 1.8.0. The vulnerability allows deleted administrators to continue receiving document contents via webhook subscriptions. This occurs because the UserDeletedProcessor does not disable webhook subscriptions for deleted administrators, enabling them to receive full document bodies, including Markdown and Yjs data, for every [truncated]