Go to main page
Versions in this module
v0
Jul 26, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jul 20, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jul 14, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jun 5, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
May 27, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 27, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 19, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 18, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 10, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Mar 31, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Feb 23, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Feb 8, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jan 31, 2026 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Nov 25, 2025 GO-2025-3492 +4 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Oct 24, 2025 GO-2025-3492 +9 more
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Dec 10, 2023 GO-2024-3046 +13 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Nov 19, 2023 GO-2024-3046 +13 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Oct 29, 2023 GO-2024-3046 +13 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Oct 21, 2023 GO-2024-3046 +13 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Oct 5, 2023 GO-2024-3046 +14 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Sep 23, 2023 GO-2024-3046 +14 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Sep 18, 2023 GO-2024-3046 +14 more
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Sep 16, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Aug 13, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Aug 5, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Changes in this version
Jul 26, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jul 22, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jul 16, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Jul 1, 2023 GO-2023-2065 +15 more
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
May 27, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
May 20, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 16, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 9, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Apr 3, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Mar 11, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Mar 4, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Feb 24, 2023 GO-2023-2036 +17 more
GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos
GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos
GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos
GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos
GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos
GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos
GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos
GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos
GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos
GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos
GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos
GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos
GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos
GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos
Changes in this version