Affected by GO-2025-3492 and 4 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

base

package

v0.31.0-rc.1 Latest Latest Go to latest Published: Aug 30, 2026 License: MIT Imports: 1 Imported by: 0

Details

View Source

const MaxUsernameLength = 36

MaxUsernameLength is the maximum number of ASCII characters in a writable username.

View Source

var (
	UIDMatcher = regexp.MustCompile(`^[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,34}[a-zA-Z0-9])?$`)
)

func IsUsernameCharacter(char byte) bool

IsUsernameCharacter reports whether an ASCII byte may occur in a writable username.

func IsValidUsername(username string) bool

IsValidUsername reports whether username satisfies the writable username format.

This section is empty.