filter

package

Go to main page

Versions in this module

v0

v0.25.3

Nov 25, 2025 GO-2025-3492 +3 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

v0.25.2

Oct 24, 2025 GO-2025-3492 +8 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ func AppendConditions(ctx context.Context, engine *Engine, filters []string, dialect DialectName, ...) error

+ type Column struct

+ Name string

+ Table string

+ type ComparisonCondition struct

+ Left ValueExpr

+ Operator ComparisonOperator

+ Right ValueExpr

+ type ComparisonOperator string

+ const CompareEq

+ const CompareGt

+ const CompareGte

+ const CompareLt

+ const CompareLte

+ const CompareNeq

+ type Condition interface

+ type ConstantCondition struct

+ Value bool

+ type ContainsCondition struct

+ Field string

+ Value string

+ type DialectName string

+ const DialectMySQL

+ const DialectPostgres

+ const DialectSQLite

+ type ElementInCondition struct

+ Element ValueExpr

+ Field string

+ type Engine struct

+ func DefaultEngine() (*Engine, error)

+ func NewEngine(schema Schema) (*Engine, error)

+ func (e *Engine) Compile(_ context.Context, filter string) (*Program, error)

+ func (e *Engine) CompileToStatement(ctx context.Context, filter string, opts RenderOptions) (Statement, error)

+ type Field struct

+ AliasFor string

+ AllowedComparisonOps map[ComparisonOperator]bool

+ Column Column

+ Expressions map[DialectName]string

+ JSONPath []string

+ Kind FieldKind

+ Name string

+ SupportsContains bool

+ Type FieldType

+ type FieldKind string

+ const FieldKindBoolColumn

+ const FieldKindJSONBool

+ const FieldKindJSONList

+ const FieldKindScalar

+ const FieldKindVirtualAlias

+ type FieldPredicateCondition struct

+ Field string

+ type FieldRef struct

+ Name string

+ type FieldType string

+ const FieldTypeBool

+ const FieldTypeInt

+ const FieldTypeString

+ const FieldTypeTimestamp

+ type FunctionValue struct

+ Args []ValueExpr

+ Name string

+ type InCondition struct

+ Left ValueExpr

+ Values []ValueExpr

+ type LiteralValue struct

+ Value interface{}

+ type LogicalCondition struct

+ Left Condition

+ Operator LogicalOperator

+ Right Condition

+ type LogicalOperator string

+ const LogicalAnd

+ const LogicalOr

+ type NotCondition struct

+ Expr Condition

+ type Program struct

+ func (p *Program) ConditionTree() Condition

+ func (p *Program) Render(opts RenderOptions) (Statement, error)

+ type RenderOptions struct

+ Dialect DialectName

+ DisableNullChecks bool

+ PlaceholderOffset int

+ type Schema struct

+ EnvOptions []cel.EnvOption

+ Fields map[string]Field

+ Name string

+ func NewSchema() Schema

+ func (s Schema) Field(name string) (Field, bool)

+ func (s Schema) ResolveAlias(name string) (Field, bool)

+ type Statement struct

+ Args []any

+ SQL string

+ type ValueExpr interface

v0.25.1

Sep 10, 2025 GO-2025-3492 +8 more