Affected by GO-2025-3492
and 8 other vulnerabilities
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
package
Version:
v0.25.0
Opens a new window with list of versions in this module.
Published: Jul 16, 2025
License: MIT
Opens a new window with license information.
Imports: 10
Opens a new window with list of imports.
Imported by: 1
Opens a new window with list of known importers.
Documentation
¶
DeleteObject deletes an object in S3.
PresignGetObject presigns an object in S3.
UploadObject uploads an object to S3.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.