| Memos has an Incorrect Privilege Assignment issueCVE-2026-6634 · GHSA-GQP3-HFC3-8Q54Version ranges need review. |
github.com/usememos/memos |
Go |
Low
|
No fix reported |
|
| Memos' Access Tokens Stay Valid after User Password ChangeCVE-2024-21635 · GHSA-MR34-8733-GRR2Version ranges need review. |
github.com/usememos/memos |
Go |
High
|
Fix reported |
|
| memos vulnerability allows arbitrarily modification or deletion of attachmentsCVE-2025-65798 · GHSA-8P44-G572-557HVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| memos vulnerability allows arbitrarily modification or deletion registered identity providersCVE-2025-65797 · GHSA-99M2-QWX6-2W6FVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| memos lacks file name validation or verificationCVE-2025-65799 · GHSA-QGJP-5G5X-VHQ2Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| memos vulnerability allows the creation of arbitrary accountsCVE-2025-65795 · GHSA-MG56-WC4Q-RW4WVersion ranges need review. |
github.com/usememos/memos |
Go |
High
|
Fix reported |
|
| memos vulnerability allows arbitrarily reactions deletionCVE-2025-65796 · GHSA-8JCJ-G9F4-QX42Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| Memos Vulnerable to Stored Cross-Site ScriptingCVE-2025-56761 · GHSA-CGRG-86M5-XM4WVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
No fix reported |
|
| Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLsCVE-2025-50738 · GHSA-HFCF-79GH-F3JCVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| Memos Server-Side Request Forgery (SSRF)CVE-2025-22952 · GHSA-WFXG-V3J4-7QMJVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
No fix reported |
|
| Memos Vulnerable to Path Traversal via the CreateResource EndpointCVE-2025-56760 · GHSA-78J5-8VQ7-JXV5Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
No fix reported |
|
| Stored XSS using two files in usememos/memosCVE-2023-0109 · GHSA-5R2G-59PX-3Q9WVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| memos CORS Misconfiguration in server.go (GHSL-2024-034)CVE-2024-41659 · GHSA-P4FX-QF2H-JPMJVersion ranges need review. |
github.com/usememos/memos |
Go |
High
|
Fix reported |
|
| memos vulnerable to Server-Side Request Forgery in /api/resourceCVE-2024-29030 · GHSA-65FM-2JGR-J7QQVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| memos vulnerable to Server-Side Request Forgery in /o/get/httpmetaCVE-2024-29028 · GHSA-6FCF-G3MP-XJ2XVersion ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| Cross-Site Request Forgery (CSRF) in usememos/memosCVE-2023-5036 · GHSA-2G7R-9XQ5-C6HVVersion ranges need review. |
github.com/usememos/memos |
Go |
High
|
Fix reported |
|
| usememos/memos vulnerable to stored Cross-site ScriptingCVE-2023-0110 · GHSA-X22V-QGM2-7QC7Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| usememos/memos vulnerable to stored Cross-site ScriptingCVE-2023-0111 · GHSA-H2PH-9R76-37V5Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| usememos/memos vulnerable to stored Cross-site ScriptingCVE-2023-0108 · GHSA-FPJC-CXR6-W6H8Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
| usememos/memos vulnerable to stored Cross-site ScriptingCVE-2023-0112 · GHSA-9H7X-9PMH-7GG8Version ranges need review. |
github.com/usememos/memos |
Go |
Medium
|
Fix reported |
|
