Affected by GO-2025-3492 and 3 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

memos

module

v0.29.1 Latest Latest Go to latest Published: Jun 5, 2026 License: MIT

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/usememos/memos

Links

README ¶

Featured Sponsors

Warp is an agentic development environment.

Cut code review time & bugs in half, instantly.

Memos

Open-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.

Features

Instant Capture — Timeline-first UI. Open, write, done — no folders to navigate.
Total Data Ownership — Self-hosted on your infrastructure. Notes stored in Markdown, always portable. Zero telemetry.
Radical Simplicity — Single Go binary, ~20MB Docker image. One command to deploy with SQLite, MySQL, or PostgreSQL.
Open & Extensible — MIT-licensed with full REST and gRPC APIs for integration.

Quick Start

Docker (Recommended)

docker run -d \
  --name memos \
  -p 5230:5230 \
  -v ~/.memos:/var/opt/memos \
  neosmemo/memos:stable

Open http://localhost:5230 and start writing!

Native Binary

curl -fsSL https://raw.githubusercontent.com/usememos/memos/main/scripts/install.sh | sh

Try the Live Demo

Don't want to install yet? Try our live demo first!

Other Installation Methods

Docker Compose - Recommended for production deployments
Pre-built Binaries - Available for Linux, macOS, and Windows
Kubernetes - Helm charts and manifests available
Build from Source - For development and customization

See our installation guide for detailed instructions.

Contributing

Contributions are welcome — bug reports, feature suggestions, pull requests, documentation, and translations.

Star History

License

Memos is open-source software licensed under the MIT License. See our Privacy Policy for details on data handling.

Website • Documentation • Demo • Discord • X/Twitter

Directories ¶

Path	Synopsis
cmd
memos command
internal
ai
ai/audio Package audio provides audio container/codec helpers for AI providers.	Package audio provides audio container/codec helpers for AI providers.
ai/audiollm Package audiollm defines the multimodal-audio capability for AI providers.	Package audiollm defines the multimodal-audio capability for AI providers.
ai/audiollm/gemini Package gemini implements audiollm.Model against the Gemini generateContent endpoint.	Package gemini implements audiollm.Model against the Gemini generateContent endpoint.
ai/stt Package stt defines the speech-to-text capability for AI providers.	Package stt defines the speech-to-text capability for AI providers.
ai/stt/openai Package openai implements stt.Transcriber against the OpenAI /audio/transcriptions endpoint (and any compatible third-party endpoint such as Groq Whisper, faster-whisper self-hosted, or Azure Whisper).	Package openai implements stt.Transcriber against the OpenAI /audio/transcriptions endpoint (and any compatible third-party endpoint such as Groq Whisper, faster-whisper self-hosted, or Azure Whisper).
base
cron
email Package email provides SMTP email sending functionality for self-hosted Memos instances.	Package email provides SMTP email sending functionality for self-hosted Memos instances.
filter
httpgetter
idp
idp/oauth2 Package oauth2 implements the OAuth2 identity provider integration.	Package oauth2 implements the OAuth2 identity provider integration.
markdown
markdown/ast
markdown/extensions
markdown/parser
markdown/renderer
motionphoto
profile
scheduler Package scheduler provides a GitHub Actions-inspired cron job scheduler.	Package scheduler provides a GitHub Actions-inspired cron job scheduler.
storage/s3
testutil
util
version
webhook
proto
gen/api/v1 Package apiv1 is a reverse proxy.	Package apiv1 is a reverse proxy.
gen/api/v1/apiv1connect
gen/store
server
auth Package auth provides authentication and authorization for the Memos server.	Package auth provides authentication and authorization for the Memos server.
notification
router/api/v1
router/api/v1/test
router/fileserver
router/frontend
router/mcp
router/rss
runner/memopayload
runner/s3presign
store
cache
db
db/mysql
db/postgres
db/sqlite Package sqlite provides SQLite driver implementation with custom functions.	Package sqlite provides SQLite driver implementation with custom functions.
test

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL