Affected by GO-2025-3492 and 4 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

test

package

v0.31.0 Latest Latest Go to latest Published: Sep 19, 2026 License: MIT Imports: 10 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type TestService struct {
	Service *apiv1.APIV1Service
	Store   *store.Store
	Profile *profile.Profile
	Secret  string
}

TestService holds the test service setup for API v1 services.

func NewTestService(t *testing.T) *TestService

NewTestService creates a new test service with SQLite database.

func (ts *TestService) Cleanup()

Cleanup closes resources after test.

func (ts *TestService) CreateHostUser(ctx context.Context, username string) (*store.User, error)

CreateHostUser creates an admin user for testing.

func (ts *TestService) CreateRegularUser(ctx context.Context, username string) (*store.User, error)

CreateRegularUser creates a regular user for testing.

func (*TestService) CreateUserContext(ctx context.Context, userID int32) context.Context

CreateUserContext creates a context with the given user's ID for authentication.

func (ts *TestService) InviteAndAcceptSpaceMember(ctx context.Context, create *store.SpaceMember, actorUserID int32) (*store.SpaceMember, error)

InviteAndAcceptSpaceMember is a test fixture helper that exercises the invitation lifecycle instead of bypassing invitee consent.

func (ts *TestService) SetInstanceAccessMode(ctx context.Context, mode storepb.InstanceAccessMode) error

SetInstanceAccessMode updates the instance access policy for a test.