Affected by GO-2023-2036
and 16 other vulnerabilities
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
package
Version:
v0.13.0
Opens a new window with list of versions in this module.
Published: May 20, 2023
License: MIT
Opens a new window with license information.
Imports: 2
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
Package log implements a simple logging package.
Debug wraps the zap Logger's Debug method.
EnabledLevel wraps the zap Level's Enabled method.
Error wraps the zap Logger's Error method.
Info wraps the zap Logger's Info method.
SetLevel wraps the zap Level's SetLevel method.
Sync wraps the zap Logger's Sync method.
Warn wraps the zap Logger's Warn method.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.