github.com/usememos/memos vulnerabilities (Go)

75 vulnerabilities.

• github.com/usememos/memos Go usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization CVE-2026-6634 Fix available 5.3 MediumApril 20, 2026
• github.com/usememos/memos Go memos lacks file name validation or verification CVE-2025-65799 Fix available 4.3 MediumDecember 8, 2025
• github.com/usememos/memos Go memos vulnerability allows arbitrarily modification or deletion of attachments CVE-2025-65798 Fix available 5.4 MediumDecember 8, 2025
• github.com/usememos/memos Go memos vulnerability allows arbitrarily modification or deletion registered identity providers CVE-2025-65797 Fix available 6.5 MediumDecember 8, 2025
• github.com/usememos/memos Go memos vulnerability allows arbitrarily reactions deletion CVE-2025-65796 Fix available 4.3 MediumDecember 8, 2025
• github.com/usememos/memos Go memos vulnerability allows the creation of arbitrary accounts CVE-2025-65795 Fix available 7.5 HighDecember 8, 2025
• github.com/usememos/memos Go Memos Access Tokens Stay Valid after User Password Change CVE-2024-21635 Fix available 7.1 HighNovember 14, 2025
• github.com/usememos/memos Go Memos Vulnerable to Stored Cross-Site Scripting CVE-2025-56761 Fix available 5.4 MediumSeptember 3, 2025
• github.com/usememos/memos Go Memos Vulnerable to Path Traversal via the CreateResource Endpoint CVE-2025-56760 Fix available 4.3 MediumSeptember 3, 2025
• github.com/usememos/memos Go Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs CVE-2025-50738 Public exploitFix available 9.8 CriticalJuly 29, 2025
• github.com/usememos/memos Go Memos Server-Side Request Forgery (SSRF) CVE-2025-22952 Fix available 9.8 CriticalFebruary 27, 2025
• github.com/usememos/memos Go Stored XSS in usememos/memos CVE-2023-0109 Fix available 9.8 CriticalNovember 15, 2024
• github.com/usememos/memos Go GHSL-2024-034: memos CORS Misconfiguration in server.go CVE-2024-41659 Fix available 8.1 HighAugust 20, 2024
• github.com/usememos/memos Go memos vulnerable to an SSRF in /o/get/image CVE-2024-29029 Fix available 6.1 MediumApril 19, 2024
• github.com/usememos/memos Go memos vulnerable to an SSRF in /o/get/httpmeta CVE-2024-29028 Fix available 5.8 MediumApril 19, 2024
• github.com/usememos/memos Go memos vulnerable to an SSRF in /api/resource CVE-2024-29030 Fix available 5.8 MediumApril 19, 2024
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2023-5036 Fix available 7.3 HighSeptember 18, 2023
• github.com/usememos/memos Go Improper Input Validation in usememos/memos CVE-2023-4698 Public exploitFix available 7.5 HighSeptember 1, 2023
• github.com/usememos/memos Go Improper Privilege Management in usememos/memos CVE-2023-4697 Fix available 8.8 HighSeptember 1, 2023
• github.com/usememos/memos Go Improper Access Control in usememos/memos CVE-2023-4696 Public exploitFix available 9.8 CriticalSeptember 1, 2023
• github.com/usememos/memos Go Cross Site Scripting in usememos/memos CVE-2022-25978 Fix available 5.4 MediumFebruary 15, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0112 Fix available 7.6 HighJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0111 Fix available 5.4 MediumJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0110 Fix available 7.1 HighJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0108 Fix available 7.1 HighJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0107 Fix available 6.5 MediumJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0106 Fix available 9.0 CriticalJanuary 7, 2023
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4866 Fix available 9.8 CriticalDecember 31, 2022
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4865 Fix available 8.3 HighDecember 31, 2022
• github.com/usememos/memos Go Improper Handling of Insufficient Permissions or Privileges in usememos/memos CVE-2022-4863 Fix available 8.4 HighDecember 30, 2022
• github.com/usememos/memos Go Improper Handling of Values in usememos/memos CVE-2022-4851 Fix available 9.8 CriticalDecember 29, 2022
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4850 6.5 MediumDecember 29, 2022
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4849 Fix available 8.3 HighDecember 29, 2022
• github.com/usememos/memos Go Improper Verification of Source of a Communication Channel in usememos/memos CVE-2022-4848 Fix available 8.6 HighDecember 29, 2022
• github.com/usememos/memos Go Incorrectly Specified Destination in a Communication Channel in usememos/memos CVE-2022-4847 Fix available 8.3 HighDecember 29, 2022
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4846 6.3 MediumDecember 29, 2022
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4845 Fix available 6.7 MediumDecember 29, 2022
• github.com/usememos/memos Go Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4844 6.5 MediumDecember 29, 2022
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4841 Fix available 8.6 HighDecember 29, 2022
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4840 Fix available 7.6 HighDecember 29, 2022
• github.com/usememos/memos Go Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4839 Fix available 8.0 HighDecember 29, 2022
• github.com/usememos/memos Go Improper Access Control in usememos/memos CVE-2022-4814 Fix available 8.6 HighDecember 28, 2022
• github.com/usememos/memos Go Insufficient Granularity of Access Control in usememos/memos CVE-2022-4813 Fix available 8.6 HighDecember 28, 2022
• github.com/usememos/memos Go Authorization Bypass Through User-Controlled Key in usememos/memos CVE-2022-4812 Fix available 8.6 HighDecember 28, 2022
• github.com/usememos/memos Go Authorization Bypass Through User-Controlled Key in usememos/memos CVE-2022-4811 Fix available 8.3 HighDecember 28, 2022
• github.com/usememos/memos Go Improper Access Control in usememos/memos CVE-2022-4810 Fix available 6.3 MediumDecember 28, 2022
• github.com/usememos/memos Go Improper Access Control in usememos/memos CVE-2022-4809 Fix available 8.3 HighDecember 28, 2022
• github.com/usememos/memos Go Improper Privilege Management in usememos/memos CVE-2022-4808 Fix available 4.2 MediumDecember 28, 2022
• github.com/usememos/memos Go Improper Access Control in usememos/memos CVE-2022-4807 Fix available 8.2 HighDecember 28, 2022
• github.com/usememos/memos Go Authorization Bypass Through User-Controlled Key in usememos/memos CVE-2022-4806 Fix available 8.2 HighDecember 28, 2022
• Show olderLoading…