Usememos Memos vulnerabilities

• usememos memos Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity CVE-2026-113601 5.3 MediumOctober 20, 2026
• usememos memos Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change CVE-2026-84203 8.6 HighSeptember 1, 2026
• usememos memos Memos through 0.30.0 SSRF via Omitted CGNAT Address Range CVE-2026-82476 6.9 MediumAugust 29, 2026
• memtensor memos MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET CVE-2026-75110 9.3 CriticalAugust 17, 2026
• usememos memos Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext() CVE-2026-71272 8.5 HighAugust 5, 2026
• usememos memos Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass CVE-2026-71271 8.5 HighAugust 5, 2026
• usememos memos usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization CVE-2026-6634 5.3 MediumApril 20, 2026
• usememos memos memos lacks file name validation or verification CVE-2025-65799 Fix available 4.3 MediumDecember 8, 2025
• usememos memos memos vulnerability allows arbitrarily modification or deletion of attachments CVE-2025-65798 Fix available 5.4 MediumDecember 8, 2025
• usememos memos memos vulnerability allows arbitrarily modification or deletion registered identity providers CVE-2025-65797 Fix available 6.5 MediumDecember 8, 2025
• usememos memos memos vulnerability allows arbitrarily reactions deletion CVE-2025-65796 Fix available 4.3 MediumDecember 8, 2025
• usememos memos memos vulnerability allows the creation of arbitrary accounts CVE-2025-65795 Fix available 7.5 HighDecember 8, 2025
• usememos memos Memos Access Tokens Stay Valid after User Password Change CVE-2024-21635 Fix available 7.1 HighNovember 14, 2025
• usememos memos Memos Vulnerable to Stored Cross-Site Scripting CVE-2025-56761 5.4 MediumSeptember 3, 2025
• usememos memos Memos Vulnerable to Path Traversal via the CreateResource Endpoint CVE-2025-56760 4.3 MediumSeptember 3, 2025
• usememos memos Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs CVE-2025-50738 Public exploitFix available 9.8 CriticalJuly 29, 2025
• usememos memos Memos Server-Side Request Forgery (SSRF) CVE-2025-22952 9.8 CriticalFebruary 27, 2025
• usememos memos, usememos/memos +1 more Stored XSS in usememos/memos CVE-2023-0109 Fix available 9.8 CriticalNovember 15, 2024
• usememos memos GHSL-2024-034: memos CORS Misconfiguration in server.go CVE-2024-41659 Fix available 8.1 HighAugust 20, 2024
• memos memos vulnerable to an SSRF in /o/get/image CVE-2024-29029 Fix available 6.1 MediumApril 19, 2024
• usememos memos memos vulnerable to an SSRF in /o/get/httpmeta CVE-2024-29028 Fix available 5.8 MediumApril 19, 2024
• memos memos vulnerable to an SSRF in /api/resource CVE-2024-29030 Fix available 5.8 MediumApril 19, 2024
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2023-5036 Fix available 7.3 HighSeptember 18, 2023
• usememos memos, usememos/memos +1 more Improper Input Validation in usememos/memos CVE-2023-4698 Public exploitFix available 7.5 HighSeptember 1, 2023
• usememos memos, usememos/memos +1 more Improper Privilege Management in usememos/memos CVE-2023-4697 Fix available 8.8 HighSeptember 1, 2023
• usememos memos, usememos/memos +1 more Improper Access Control in usememos/memos CVE-2023-4696 Public exploitFix available 9.8 CriticalSeptember 1, 2023
• usememos memos Cross Site Scripting in usememos/memos CVE-2022-25978 Fix available 5.4 MediumFebruary 15, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0112 Fix available 7.6 HighJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0111 Fix available 5.4 MediumJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0110 Fix available 7.1 HighJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0108 Fix available 7.1 HighJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0107 Fix available 6.5 MediumJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2023-0106 Fix available 9.0 CriticalJanuary 7, 2023
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4866 Fix available 9.8 CriticalDecember 31, 2022
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4865 Fix available 8.3 HighDecember 31, 2022
• usememos memos, usememos/memos +1 more Improper Handling of Insufficient Permissions or Privileges in usememos/memos CVE-2022-4863 Fix available 8.4 HighDecember 30, 2022
• usememos memos, usememos/memos +1 more Improper Handling of Values in usememos/memos CVE-2022-4851 Fix available 9.8 CriticalDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4850 6.5 MediumDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4849 Fix available 8.3 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Improper Verification of Source of a Communication Channel in usememos/memos CVE-2022-4848 Fix available 8.6 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Incorrectly Specified Destination in a Communication Channel in usememos/memos CVE-2022-4847 Fix available 8.3 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4846 6.3 MediumDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4845 Fix available 6.7 MediumDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-Site Request Forgery (CSRF) in usememos/memos CVE-2022-4844 6.5 MediumDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4841 Fix available 8.6 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4840 Fix available 7.6 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos CVE-2022-4839 Fix available 8.0 HighDecember 29, 2022
• usememos memos, usememos/memos +1 more Improper Access Control in usememos/memos CVE-2022-4814 Fix available 8.6 HighDecember 28, 2022
• usememos memos, usememos/memos +1 more Insufficient Granularity of Access Control in usememos/memos CVE-2022-4813 Fix available 8.6 HighDecember 28, 2022
• usememos memos, usememos/memos +1 more Authorization Bypass Through User-Controlled Key in usememos/memos CVE-2022-4812 Fix available 8.6 HighDecember 28, 2022
• Show olderLoading…