Affected by GO-2023-2065 and 14 other vulnerabilities

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

server

package

v0.14.4 Latest Latest Go to latest Published: Aug 13, 2023 License: MIT Imports: 24 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/usememos/memos

Links

Documentation ¶

Index ¶

type BackupRunner
- func NewBackupRunner(store *store.Store) *BackupRunner
- func (r *BackupRunner) Run(ctx context.Context)
type Server
- func NewServer(ctx context.Context, profile *profile.Profile, store *store.Store) (*Server, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type BackupRunner ¶ added in v0.14.3

type BackupRunner struct {
	Store *store.Store
}

func NewBackupRunner ¶ added in v0.14.3

func NewBackupRunner(store *store.Store) *BackupRunner

func (*BackupRunner) Run ¶ added in v0.14.3

func (r *BackupRunner) Run(ctx context.Context)

type Server ¶

type Server struct {
	ID      string
	Secret  string
	Profile *profile.Profile
	Store   *store.Store
	// contains filtered or unexported fields
}

func NewServer ¶

func NewServer(ctx context.Context, profile *profile.Profile, store *store.Store) (*Server, error)

@title memos API @version 1.0 @description A privacy-first, lightweight note-taking service.

@contact.name API Support @contact.url https://github.com/orgs/usememos/discussions

@license.name MIT License @license.url https://github.com/usememos/memos/blob/main/LICENSE

@BasePath /

@externalDocs.url https://usememos.com/ @externalDocs.description Find out more about Memos

@securitydefinitions.apikey ApiKeyAuth @in query @name openId @description Insert your Open ID API Key here.

func (*Server) GetEcho ¶ added in v0.13.0

func (s *Server) GetEcho() *echo.Echo

func (*Server) Shutdown ¶ added in v0.10.3

func (s *Server) Shutdown(ctx context.Context)

func (*Server) Start ¶ added in v0.10.3

func (s *Server) Start(ctx context.Context) error

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
profile
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL