Affected by GO-2025-3492 and 4 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2026-5403: Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

fakes3

package

v0.31.0 Latest Latest Go to latest Published: Sep 19, 2026 License: MIT Imports: 7 Imported by: 0

Details

Package fakes3 provides an in-process S3-compatible service for tests.

This section is empty.

This section is empty.

This section is empty.

type Server struct {
	URL string
	// contains filtered or unexported fields
}

Server is an in-memory S3-compatible HTTP service.

func New(t testing.TB, buckets ...string) *Server

New starts an in-process S3 service with the requested buckets.

func (s *Server) Config(bucket string) *storepb.StorageS3Config

Config returns a storage configuration that connects to the fake service.

func (s *Server) GetObject(bucket, key string) ([]byte, error)

GetObject reads an object directly from the in-memory store.

func (s *Server) PutObject(bucket, key, contentType string, content []byte) error

PutObject writes an object directly into the in-memory store, bypassing the HTTP API, for arranging state that predates the code under test.