Affected by GO-2025-3492 and 3 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

server

package

v0.28.0 Latest Latest Go to latest Published: Apr 27, 2026 License: MIT Imports: 21 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Server struct {
	Secret  string
	Profile *profile.Profile
	Store   *store.Store
	// contains filtered or unexported fields
}

func NewServer(ctx context.Context, profile *profile.Profile, store *store.Store) (*Server, error)

func (s *Server) Shutdown(ctx context.Context)

func (s *Server) Start(ctx context.Context) error

Path	Synopsis
auth Package auth provides authentication and authorization for the Memos server.	Package auth provides authentication and authorization for the Memos server.
router
api/v1
api/v1/test
fileserver
frontend
mcp
rss
runner
memopayload
s3presign