parser

Jan 28, 2024 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ type EmbeddedContentParser struct

+ func NewEmbeddedContentParser() *EmbeddedContentParser

+ func (*EmbeddedContentParser) Match(tokens []*tokenizer.Token) (ast.Node, int)

+ type ReferencedContentParser struct

+ func NewReferencedContentParser() *ReferencedContentParser

+ func (*ReferencedContentParser) Match(tokens []*tokenizer.Token) (ast.Node, int)

+ type SubscriptParser struct

+ func NewSubscriptParser() *SubscriptParser

+ func (*SubscriptParser) Match(tokens []*tokenizer.Token) (ast.Node, int)

+ type SuperscriptParser struct

+ func NewSuperscriptParser() *SuperscriptParser

+ func (*SuperscriptParser) Match(tokens []*tokenizer.Token) (ast.Node, int)

Jan 18, 2024 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ func ParseBlock(tokens []*tokenizer.Token) ([]ast.Node, error)

+ func ParseBlockWithParsers(tokens []*tokenizer.Token, blockParsers []BlockParser) ([]ast.Node, error)

+ func ParseInlineWithParsers(tokens []*tokenizer.Token, inlineParsers []InlineParser) ([]ast.Node, error)

+ type AutoLinkParser struct

+ func NewAutoLinkParser() *AutoLinkParser

+ func (*AutoLinkParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *AutoLinkParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type EscapingCharacterParser struct

+ func NewEscapingCharacterParser() *EscapingCharacterParser

+ func (*EscapingCharacterParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *EscapingCharacterParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type HighlightParser struct

+ func (*HighlightParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *HighlightParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type InlineParser

+ func NewHighlightParser() InlineParser

+ type MathBlockParser struct

+ func NewMathBlockParser() *MathBlockParser

+ func (*MathBlockParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *MathBlockParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type MathParser struct

+ func NewMathParser() *MathParser

+ func (*MathParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *MathParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type OrderedListParser struct

+ func NewOrderedListParser() *OrderedListParser

+ func (*OrderedListParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *OrderedListParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type TableParser struct

+ func NewTableParser() *TableParser

+ func (*TableParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *TableParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type TaskListParser struct

+ func NewTaskListParser() *TaskListParser

+ func (*TaskListParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *TaskListParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type UnorderedListParser struct

+ func NewUnorderedListParser() *UnorderedListParser

+ func (*UnorderedListParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *UnorderedListParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

Dec 15, 2023 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ func Parse(tokens []*tokenizer.Token) ([]ast.Node, error)

+ func ParseInline(tokens []*tokenizer.Token) ([]ast.Node, error)

+ type BaseParser interface

+ Match func(tokens []*tokenizer.Token) (int, bool)

+ Parse func(tokens []*tokenizer.Token) (ast.Node, error)

+ type BlockParser interface

+ type BlockquoteParser struct

+ func NewBlockquoteParser() *BlockquoteParser

+ func (*BlockquoteParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *BlockquoteParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type BoldItalicParser struct

+ func (*BoldItalicParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *BoldItalicParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type BoldParser

+ func (p *BoldParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type CodeBlockParser

+ func (p *CodeBlockParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type CodeParser

+ func (p *CodeParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type Context struct

+ BlockParsers []BlockParser

+ InlineParsers []InlineParser

type HeadingParser

+ func (p *HeadingParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type HorizontalRuleParser struct

+ func NewHorizontalRuleParser() *HorizontalRuleParser

+ func (*HorizontalRuleParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *HorizontalRuleParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type ImageParser

+ func (p *ImageParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type InlineParser interface

+ func NewBoldItalicParser() InlineParser

type ItalicParser

+ func (p *ItalicParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type LineBreakParser struct

+ func NewLineBreakParser() *LineBreakParser

+ func (*LineBreakParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *LineBreakParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type LinkParser

+ func (p *LinkParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type ParagraphParser

+ func (p *ParagraphParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type StrikethroughParser struct

+ func NewStrikethroughParser() *StrikethroughParser

+ func (*StrikethroughParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (p *StrikethroughParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

type TagParser

+ func (p *TagParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

+ type TextParser struct

+ Content string

+ func NewTextParser() *TextParser

+ func (*TextParser) Match(tokens []*tokenizer.Token) (int, bool)

+ func (*TextParser) Parse(tokens []*tokenizer.Token) (ast.Node, error)

Dec 10, 2023 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Nov 19, 2023 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Oct 29, 2023 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Oct 21, 2023 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Oct 5, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Sep 23, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Sep 18, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Sep 16, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Aug 13, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Aug 5, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Jul 26, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Jul 22, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Jul 16, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Jul 1, 2023 GO-2023-2065 +14 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

May 27, 2023 GO-2023-2036 +16 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ type BoldParser struct

+ ContentTokens []*tokenizer.Token

+ func NewBoldParser() *BoldParser

+ func (*BoldParser) Match(tokens []*tokenizer.Token) *BoldParser

+ type CodeBlockParser struct

+ Content string

+ Language string

+ func NewCodeBlockParser() *CodeBlockParser

+ func (*CodeBlockParser) Match(tokens []*tokenizer.Token) *CodeBlockParser

+ type CodeParser struct

+ Content string

+ func NewCodeParser() *CodeParser

+ func (*CodeParser) Match(tokens []*tokenizer.Token) *CodeParser

+ type HeadingParser struct

+ ContentTokens []*tokenizer.Token

+ Level int

+ func NewHeadingParser() *HeadingParser

+ func (*HeadingParser) Match(tokens []*tokenizer.Token) *HeadingParser

+ type ImageParser struct

+ AltText string

+ URL string

+ func NewImageParser() *ImageParser

+ func (*ImageParser) Match(tokens []*tokenizer.Token) *ImageParser

+ type ItalicParser struct

+ ContentTokens []*tokenizer.Token

+ func NewItalicParser() *ItalicParser

+ func (*ItalicParser) Match(tokens []*tokenizer.Token) *ItalicParser

+ type LinkParser struct

+ ContentTokens []*tokenizer.Token

+ URL string

+ func NewLinkParser() *LinkParser

+ func (*LinkParser) Match(tokens []*tokenizer.Token) *LinkParser

+ type ParagraphParser struct

+ ContentTokens []*tokenizer.Token

+ func NewParagraphParser() *ParagraphParser

+ func (*ParagraphParser) Match(tokens []*tokenizer.Token) *ParagraphParser

+ type TagParser struct

+ ContentTokens []*tokenizer.Token

+ func NewTagParser() *TagParser

+ func (*TagParser) Match(tokens []*tokenizer.Token) *TagParser

May 20, 2023 GO-2023-2036 +16 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ type HeadingTokenizer struct

+ func NewHeadingTokenizer() *HeadingTokenizer

+ func (*HeadingTokenizer) Parse(parent *ast.Node, block string) *ast.Node

+ func (*HeadingTokenizer) Trigger() []byte