Affected by GO-2025-3492 and 4 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

linkmeta

package

v0.31.0 Latest Latest Go to latest Published: Sep 19, 2026 License: MIT Imports: 17 Imported by: 0

Details

This section is empty.

View Source

var ErrInternalIP = errors.New("internal IP addresses are not allowed")

ErrInternalIP indicates that a link preview target resolves to a disallowed internal address.

This section is empty.

type HTMLMeta struct {
	Title       string `json:"title"`
	Description string `json:"description"`
	Image       string `json:"image"`
}

HTMLMeta contains metadata used to build a link preview.

type HTMLMetaFetcher struct {
	// contains filtered or unexported fields
}

HTMLMetaFetcher fetches and caches standards-based link preview metadata.

func NewHTMLMetaFetcher() *HTMLMetaFetcher

NewHTMLMetaFetcher creates a link preview fetcher with an SSRF-safe HTTP client.

func (f *HTMLMetaFetcher) Get(ctx context.Context, urlStr string) (*HTMLMeta, error)

Get fetches metadata for a URL.