server

Jul 26, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 20, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 14, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jun 5, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

May 27, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 27, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 19, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 18, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 10, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Mar 31, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Feb 23, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Feb 8, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jan 31, 2026 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 25, 2025 GO-2025-3492 +4 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 24, 2025 GO-2025-3492 +9 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 10, 2025 GO-2025-3492 +9 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 16, 2025 GO-2025-3492 +9 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jun 2, 2025 GO-2025-3492 +9 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

May 12, 2025 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Mar 23, 2025 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Mar 13, 2025 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Feb 5, 2025 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jan 29, 2025 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 13, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 7, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 29, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 12, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 2, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 3, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 28, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 17, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jun 9, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jun 1, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

May 17, 2024 GO-2025-3492 +10 more

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 26, 2024 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

type Server

+ func (s *Server) StartBackgroundRunners(ctx context.Context)

Apr 9, 2024 GO-2024-3046 +12 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Mar 9, 2024 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Feb 24, 2024 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func CORSMiddleware() echo.MiddlewareFunc

Feb 3, 2024 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jan 28, 2024 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jan 18, 2024 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 15, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 10, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 19, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 29, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 21, 2023 GO-2024-3046 +13 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 5, 2023 GO-2024-3046 +14 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 23, 2023 GO-2024-3046 +14 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 18, 2023 GO-2024-3046 +14 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 16, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Aug 13, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Aug 5, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ type BackupRunner struct

+ Store *store.Store

+ func NewBackupRunner(store *store.Store) *BackupRunner

+ func (r *BackupRunner) Run(ctx context.Context)

Jul 26, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 22, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 16, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 1, 2023 GO-2023-2065 +15 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func CheckResourceVisibility(ctx context.Context, s *store.Store, resourceID int) (store.Visibility, error)

type Server

+ Secret string

May 27, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

May 20, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ const MebiByte

type Server

+ func (s *Server) GetEcho() *echo.Echo

Apr 16, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 9, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Apr 3, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func GenerateTokensAndSetCookies(c echo.Context, user *api.User, mode string, secret string) error

+ func JWTMiddleware(server *Server, next echo.HandlerFunc, secret string) echo.HandlerFunc

+ func RemoveTokensAndCookies(c echo.Context)

+ type Claims struct

+ Name string

Mar 11, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Mar 4, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Feb 24, 2023 GO-2023-2036 +17 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ const MaxRSSItemCount

+ const MaxRSSItemTitleLength

Feb 10, 2023 GO-2023-1566 +18 more

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

type Server

+ func (s *Server) Shutdown(ctx context.Context)

+ func (s *Server) Start(ctx context.Context) error

Jan 21, 2023 GO-2023-1566 +18 more

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jan 14, 2023 GO-2023-1566 +18 more

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func DefaultAPIRequestSkipper(c echo.Context) bool

Jan 7, 2023 GO-2023-1566 +18 more

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func DefaultGetRequestSkipper(c echo.Context) bool

type MetricCollector

+ ID string

+ func (mc *MetricCollector) Identify(_ context.Context)

type Server

+ ID string

+ func (server *Server) DefaultAuthSkipper(c echo.Context) bool

Dec 31, 2022 GO-2023-1461 +23 more

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 23, 2022 GO-2022-1219 +50 more

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 16, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 10, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Dec 2, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

type MetricCollector

+ Collector metric.Collector

+ Enabled bool

+ Profile *profile.Profile

+ Store *store.Store

Nov 25, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 18, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 12, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Nov 4, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 29, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ type MetricCollector struct

+ func NewMetricCollector(profile *profile.Profile, store *store.Store) MetricCollector

+ func (mc *MetricCollector) Collect(_ context.Context, metric *metric.Metric)

type Server

+ Collector *MetricCollector

Oct 21, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 14, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Oct 3, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 24, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 16, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 9, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Sep 2, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Aug 27, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Aug 20, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Aug 6, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 29, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 22, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 15, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 9, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Jul 1, 2022 GO-2022-1189 +60 more

  GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

  GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

  GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

  GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

  GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

  GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

  GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

  GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

  GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

  GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

  GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

  GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

  GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

  GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

  GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

  GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

  GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

  GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

  GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

  GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

  GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

  GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

  GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

  GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

  GO-2023-1566: Cross site scripting in github.com/usememos/memos

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

  GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

  GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

  GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

  GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

  GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

  GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

  GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

  GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

  GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

  GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

  GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

  GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Changes in this version

+ func BasicAuthMiddleware(s *Server, next echo.HandlerFunc) echo.HandlerFunc

+ type Server struct

+ Profile *profile.Profile

+ Store *store.Store

+ func NewServer(profile *profile.Profile) *Server

+ func (server *Server) Run() error