Affected by GO-2025-3492 and 8 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

memopayload

package

v0.25.2 Latest Latest Go to latest Published: Oct 24, 2025 License: MIT Imports: 8 Imported by: 0

Details

This section is empty.

This section is empty.

func RebuildMemoPayload(memo *store.Memo) error

func TraverseASTDocument(doc *ast.Document, fn func(ast.Node))

type Runner struct {
	Store *store.Store
}

func NewRunner(store *store.Store) *Runner

func (r *Runner) RunOnce(ctx context.Context)

RunOnce rebuilds the payload of all memos.