github.com/usememos/memos
Go64 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/usememos/memospage 1 of 2
- CVE-2022-25978MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.10.4-0.20230211093429-b11d2130a0842023-02-15
All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme…
- CVE-2022-4609MEDIUMCVSS 5.4EG 5.42022-12-19
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4683MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.02022-12-23
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4684HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.02022-12-23
Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4686CRITICALCVSS 9.8EG 9.8✓ Fixed in 0.9.02022-12-23
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4687HIGHCVSS 8.1EG 8.1✓ Fixed in 0.9.02022-12-23
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4688HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.02022-12-23
Improper Authorization in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4689HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.02022-12-23
Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4690MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.02022-12-23
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4691MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.02022-12-27
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4692MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.02022-12-23
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4694MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.02022-12-27
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4695MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.02022-12-27
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
- CVE-2022-4734HIGHCVSS 8.1EG 8.1✓ Fixed in 0.9.12022-12-27
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4767HIGHCVSS 7.5EG 7.5✓ Fixed in 0.9.12022-12-27
Denial of Service in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4796HIGHCVSS 8.1EG 8.1✓ Fixed in 0.9.12022-12-28
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4797MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4798MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4799MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4800MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-28
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4801MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.12022-12-28
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4802MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4803HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4804MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.12022-12-28
Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4805MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4806MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4807MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4808HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.12022-12-28
Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4809HIGHCVSS 8.8EG 8.8✓ Fixed in 0.9.12022-12-28
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4810MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4811HIGHCVSS 8.3EG 8.3✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.
- CVE-2022-4812MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-28
Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4813MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4814MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-28
Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4839MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.12022-12-29
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4840MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.12022-12-29
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4841MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.9.12022-12-29
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4844HIGHCVSS 8.8EG 8.82022-12-29
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4845MEDIUMCVSS 4.3EG 4.3✓ Fixed in 0.9.12022-12-29
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4846MEDIUMCVSS 6.5EG 6.52022-12-29
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4847MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-29
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4848MEDIUMCVSS 5.7EG 5.7✓ Fixed in 0.9.12022-12-29
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4849MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-29
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4850MEDIUMCVSS 6.5EG 6.52022-12-29
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4851MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.9.12022-12-29
Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4863MEDIUMCVSS 6.5EG 6.5✓ Fixed in 0.9.12022-12-30
Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4865CRITICALCVSS 9.0EG 9.0✓ Fixed in 0.9.12022-12-31
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2022-4866CRITICALCVSS 9.0EG 9.0✓ Fixed in 0.9.12022-12-31
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.
- CVE-2023-0106MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.10.02023-01-07
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
- CVE-2023-0107MEDIUMCVSS 5.4EG 5.4✓ Fixed in 0.10.02023-01-07
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.
Check whether github.com/usememos/memos is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/usememos/memos CVEs against the assets you own.
Start Free Scan →