Affected by GO-2025-3492 and 4 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

server

package

v0.31.0 Latest Latest Go to latest Published: Sep 19, 2026 License: MIT Imports: 21 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/usememos/memos

Links

Documentation ¶

Overview ¶

Package server is the HTTP process: it boots the Echo server, mounts every transport (server/api/v1, server/fileserver, server/frontend, server/mcp), and owns HTTP-only concerns such as auth tokens and process configuration.

Layering: server may import core, store, provider, markdown, filter, and internal. Nothing imports server except cmd.

Index ¶

type Server
- func NewServer(ctx context.Context, profile *profile.Profile, store *store.Store) (*Server, error)
- func (s *Server) Shutdown(ctx context.Context)
- func (s *Server) Start() error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Server ¶

type Server struct {
	Secret  string
	Profile *profile.Profile
	Store   *store.Store
	// contains filtered or unexported fields
}

func NewServer ¶

func NewServer(ctx context.Context, profile *profile.Profile, store *store.Store) (*Server, error)

func (*Server) Shutdown ¶ added in v0.10.3

func (s *Server) Shutdown(ctx context.Context)

func (*Server) Start ¶ added in v0.10.3

func (s *Server) Start() error

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
api
v1
v1/test
auth Package auth provides authentication and authorization for the Memos server.	Package auth provides authentication and authorization for the Memos server.
fileserver
frontend
mcp

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL