Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

profile

package

Go to main page

Versions in this module

v0

v0.24.3

May 12, 2025 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ UNIXSock string

v0.24.2

Mar 23, 2025 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.24.1

Mar 13, 2025 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.24.0

Feb 5, 2025 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.1

Jan 29, 2025 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.0

Dec 13, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.0-rc.3

Dec 7, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.0-rc.2

Nov 29, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.0-rc.1

Nov 12, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.23.0-rc.0

Nov 2, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.22.5

Sep 3, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ InstanceURL string

v0.22.4

Jul 28, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ PasswordAuth bool

+ func (p *Profile) Validate() error

v0.22.3

Jul 17, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Public bool

v0.22.2

Jun 9, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.22.1

Jun 1, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.22.0

May 17, 2024 GO-2025-3492 +9 more

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.21.1

Apr 26, 2024 GO-2024-3046 +11 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.21.0

Apr 9, 2024 GO-2024-3046 +11 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Origins []string

v0.20.1

Mar 9, 2024 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.20.0

Feb 24, 2024 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Frontend bool

v0.19.1

Feb 3, 2024 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.19.0

Jan 28, 2024 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.18.2

Jan 18, 2024 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.18.1

Dec 15, 2023 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.18.0

Dec 10, 2023 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.17.1

Nov 19, 2023 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.17.0

Oct 29, 2023 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Metric bool

v0.16.1

Oct 21, 2023 GO-2024-3046 +12 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.16.0

Oct 5, 2023 GO-2024-3046 +13 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Driver string

v0.15.2

Sep 23, 2023 GO-2024-3046 +13 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.15.1

Sep 18, 2023 GO-2024-3046 +13 more

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.15.0

Sep 16, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Addr string

v0.14.4

Aug 13, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.14.3

Aug 5, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.14.2

Jul 26, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.14.1

Jul 22, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.14.0

Jul 16, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.13.2

Jul 1, 2023 GO-2023-2065 +14 more

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.13.1

May 27, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.13.0

May 20, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.12.2

Apr 16, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.12.1

Apr 9, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.12.0

Apr 3, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.11.2

Mar 11, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.11.1

Mar 4, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ func (p *Profile) IsDev() bool

v0.11.0

Feb 24, 2023 GO-2023-2036 +16 more

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.10.3

Feb 10, 2023 GO-2023-1566 +17 more

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.10.2

Jan 21, 2023 GO-2023-1566 +17 more

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.10.1

Jan 14, 2023 GO-2023-1566 +17 more

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.10.0

Jan 7, 2023 GO-2023-1566 +17 more

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.9.1

Dec 31, 2022 GO-2023-1461 +22 more

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.9.0

Dec 23, 2022 GO-2022-1219 +49 more

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.8.3

Dec 16, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.8.2

Dec 10, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.8.1

Dec 2, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.8.0

Nov 25, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.7.3

Nov 18, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.7.2

Nov 12, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.7.1

Nov 4, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.7.0

Oct 29, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.6.1

Oct 21, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.6.0

Oct 14, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.5.0

Oct 3, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.5

Sep 24, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.4

Sep 16, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.3

Sep 9, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.2

Sep 2, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.1

Aug 27, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.4.0

Aug 20, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.3.1

Aug 6, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.3.0

Jul 29, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.2.2

Jul 22, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.2.1

Jul 15, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

v0.2.0

Jul 9, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

type Profile

+ Data string

v0.1.3

Jul 1, 2022 GO-2022-1189 +59 more

GO-2022-1189: usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos

GO-2022-1190: usememos/memos vulnerable to improper authorization in github.com/usememos/memos

GO-2022-1191: usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos

GO-2022-1192: usememos/memos missing Secure cookie attribute in github.com/usememos/memos

GO-2022-1205: usememos/memos vulnerable to improper access control in github.com/usememos/memos

GO-2022-1215: usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos

GO-2022-1216: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1217: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1218: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1219: usememos/memos Denial of Service vulnerability in github.com/usememos/memos

GO-2022-1220: usememos/memos may leak user information to an authenticated user in github.com/usememos/memos

GO-2022-1225: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2022-1235: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1236: usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos

GO-2022-1239: usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

GO-2022-1240: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2022-1243: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1244: usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts in github.com/usememos/memos

GO-2022-1245: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1248: usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos

GO-2022-1250: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1251: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1252: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1253: usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos

GO-2022-1256: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1257: usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos

GO-2022-1259: usememos/memos Improper Authorization vulnerability in github.com/usememos/memos

GO-2022-1260: usememos/memos vulnerable to Comparison of Object References Instead of Object Contents in github.com/usememos/memos

GO-2022-1261: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1263: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2022-1264: usememos/memos has Incorrectly Specified Destination in a Communication Channel in github.com/usememos/memos

GO-2022-1266: usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos

GO-2023-1270: usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges in github.com/usememos/memos

GO-2023-1285: sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos

GO-2023-1291: usememos/memos Improper Access Control vulnerability in github.com/usememos/memos

GO-2023-1292: usememos/memos Incorrect Use of Privileged APIs vulnerability in github.com/usememos/memos

GO-2023-1449: usememos/memos Improper Privilege Management vulnerability in github.com/usememos/memos

GO-2023-1461: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1462: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1465: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1469: usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos

GO-2023-1566: Cross site scripting in github.com/usememos/memos

GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

GO-2024-3274: Stored XSS using two files in usememos/memos in github.com/usememos/memos

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3831: Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

Changes in this version

+ type Profile struct

+ DSN string

+ Mode string

+ Port int

+ Version string

+ func GetProfile() *Profile