github.com/usememos/memos (Go)
Advisories
136
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 0.25.3 or later clears every advisory below that has a fix.
Upgrade commands
go
go get github.com/usememos/memos@v0.25.3 && go mod tidyKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-gqp3-hfc3-8q54 Memos has an Incorrect Privilege Assignment issue |
Medium EPSS 0.25% |
<= 0.22.1 | No fix yet |
| GHSA-gqp3-hfc3-8q54 Memos has an Incorrect Privilege Assignment issue |
Medium EPSS 0.25% |
all versions | No fix yet |
| GHSA-qgjp-5g5x-vhq2 memos lacks file name validation or verification |
Medium EPSS 0.21% |
< 0.25.3 | 0.25.3 |
| GHSA-qgjp-5g5x-vhq2 memos lacks file name validation or verification |
Medium EPSS 0.21% |
< 0.25.3 | 0.25.3 |
| GHSA-99m2-qwx6-2w6f memos vulnerability allows arbitrarily modification or deletion registered identity providers |
Medium EPSS 0.28% |
< 0.25.3 | 0.25.3 |
| GHSA-99m2-qwx6-2w6f memos vulnerability allows arbitrarily modification or deletion registered identity providers |
Medium EPSS 0.28% |
< 0.25.3 | 0.25.3 |
| GHSA-mg56-wc4q-rw4w memos vulnerability allows the creation of arbitrary accounts |
High EPSS 0.26% |
< 0.25.3 | 0.25.3 |
| GHSA-mg56-wc4q-rw4w memos vulnerability allows the creation of arbitrary accounts |
High EPSS 0.26% |
< 0.25.3 | 0.25.3 |
| GHSA-8p44-g572-557h memos vulnerability allows arbitrarily modification or deletion of attachments |
Medium EPSS 0.18% |
< 0.25.3 | 0.25.3 |
| GHSA-8p44-g572-557h memos vulnerability allows arbitrarily modification or deletion of attachments |
Medium EPSS 0.18% |
< 0.25.3 | 0.25.3 |
| GHSA-8jcj-g9f4-qx42 memos vulnerability allows arbitrarily reactions deletion |
Medium EPSS 0.20% |
< 0.25.3 | 0.25.3 |
| GHSA-8jcj-g9f4-qx42 memos vulnerability allows arbitrarily reactions deletion |
Medium EPSS 0.20% |
< 0.25.3 | 0.25.3 |
| GHSA-mr34-8733-grr2 Memos' Access Tokens Stay Valid after User Password Change |
High EPSS 0.31% |
< 0.18.2 | 0.18.2 |
| GHSA-mr34-8733-grr2 Memos' Access Tokens Stay Valid after User Password Change |
High EPSS 0.31% |
all versions | No fix yet |
| GHSA-cgrg-86m5-xm4w Memos Vulnerable to Stored Cross-Site Scripting |
Medium EPSS 0.26% |
all versions | No fix yet |
| GHSA-cgrg-86m5-xm4w Memos Vulnerable to Stored Cross-Site Scripting |
Medium EPSS 0.26% |
<= 0.22.0 | No fix yet |
| GHSA-78j5-8vq7-jxv5 Memos Vulnerable to Path Traversal via the CreateResource Endpoint |
Medium EPSS 0.35% |
all versions | No fix yet |
| GHSA-78j5-8vq7-jxv5 Memos Vulnerable to Path Traversal via the CreateResource Endpoint |
Medium EPSS 0.35% |
<= 0.22.0 | No fix yet |
| GHSA-hfcf-79gh-f3jc Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs |
Critical EPSS 2.42% |
< 0.24.4 | 0.24.4 |
| GHSA-hfcf-79gh-f3jc Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs |
Critical EPSS 2.42% |
< 0.24.4 | 0.24.4 |
| GHSA-wfxg-v3j4-7qmj Memos Server-Side Request Forgery (SSRF) |
Critical EPSS 2.93% |
<= 0.24.0 | No fix yet |
| GHSA-wfxg-v3j4-7qmj Memos Server-Side Request Forgery (SSRF) |
Critical EPSS 2.93% |
all versions | No fix yet |
| GHSA-5r2g-59px-3q9w Stored XSS using two files in usememos/memos |
Medium EPSS 0.46% |
< 0.10.0 | 0.10.0 |
| GHSA-5r2g-59px-3q9w Stored XSS using two files in usememos/memos |
Medium EPSS 0.46% |
< 0.10.0 | 0.10.0 |
| GHSA-p4fx-qf2h-jpmj memos CORS Misconfiguration in server.go (GHSL-2024-034) |
High EPSS 0.64% |
< 0.21.0 | 0.21.0 |
| GHSA-p4fx-qf2h-jpmj memos CORS Misconfiguration in server.go (GHSL-2024-034) |
High EPSS 0.64% |
< 0.21.0 | 0.21.0 |
| GHSA-9cqm-mgv9-vv9j memos vulnerable to Server-Side Request Forgery and Cross-site Scripting |
Medium EPSS 1.08% |
< 0.22.0 | 0.22.0 |
| GHSA-9cqm-mgv9-vv9j memos vulnerable to Server-Side Request Forgery and Cross-site Scripting |
Medium EPSS 1.08% |
< 0.22.0 | 0.22.0 |
| GHSA-65fm-2jgr-j7qq memos vulnerable to Server-Side Request Forgery in /api/resource |
Medium EPSS 1.14% |
< 0.22.0 | 0.22.0 |
| GHSA-65fm-2jgr-j7qq memos vulnerable to Server-Side Request Forgery in /api/resource |
Medium EPSS 1.14% |
< 0.22.0 | 0.22.0 |
| GHSA-6fcf-g3mp-xj2x memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta |
Medium EPSS 1.05% |
< 0.16.1 | 0.16.1 |
| GHSA-6fcf-g3mp-xj2x memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta |
Medium EPSS 1.05% |
< 0.16.1 | 0.16.1 |
| GHSA-2g7r-9xq5-c6hv Cross-Site Request Forgery (CSRF) in usememos/memos |
High EPSS 0.32% |
< 0.15.1 | 0.15.1 |
| GHSA-2g7r-9xq5-c6hv Cross-Site Request Forgery (CSRF) in usememos/memos |
High EPSS 0.32% |
< 0.15.1 | 0.15.1 |
| GHSA-96gq-6ch5-mm54 usememos/memos vulnerable to improper input validation |
High EPSS 0.92% |
all versions | No fix yet |
| GHSA-5j6p-59cj-j6cp usememos/memos vulnerable to privilege escalation |
High EPSS 0.85% |
< 0.13.2 | 0.13.2 |
| GHSA-5j6p-59cj-j6cp usememos/memos vulnerable to privilege escalation |
High EPSS 0.85% |
< 0.13.2 | 0.13.2 |
| GHSA-j2gj-g3p9-7mrr Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos |
Critical EPSS 1.12% |
< 0.13.2 | 0.13.2 |
| GHSA-j2gj-g3p9-7mrr Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos |
Critical EPSS 1.12% |
< 0.13.2 | 0.13.2 |
| GHSA-9w8x-5hv5-r6gw Cross Site Scripting in usememos/memos |
Medium EPSS 0.53% |
< 0.10.4-0.20230211093429-b11d2130a084 | 0.10.4-0.20230211093429-b11d2130a084 |
| GHSA-9w8x-5hv5-r6gw Cross Site Scripting in usememos/memos |
Medium EPSS 0.53% |
< 0.10.4-0.20230211093429-b11d2130a084 | 0.10.4-0.20230211093429-b11d2130a084 |
| GHSA-9h7x-9pmh-7gg8 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.59% |
< 0.10.0 | 0.10.0 |
| GHSA-9h7x-9pmh-7gg8 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.59% |
< 0.10.0 | 0.10.0 |
| GHSA-h2ph-9r76-37v5 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.51% |
< 0.10.0 | 0.10.0 |
| GHSA-h2ph-9r76-37v5 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.51% |
< 0.10.0 | 0.10.0 |
| GHSA-x22v-qgm2-7qc7 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.51% |
< 0.10.0 | 0.10.0 |
| GHSA-x22v-qgm2-7qc7 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.51% |
< 0.10.0 | 0.10.0 |
| GHSA-fpjc-cxr6-w6h8 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.53% |
< 0.10.0 | 0.10.0 |
| GHSA-fpjc-cxr6-w6h8 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.53% |
< 0.10.0 | 0.10.0 |
| GHSA-pcvh-px2p-vmxw usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.51% |
< 0.10.0 | 0.10.0 |
| GHSA-8686-4cr3-76wj usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.66% |
< 0.10.0 | 0.10.0 |
| GHSA-x9p9-v3x6-68mq usememos/memos vulnerable to Cross-site Scripting |
Critical EPSS 1.06% |
< 0.9.1 | 0.9.1 |
| GHSA-8w5q-5fpq-v4pm usememos/memos Cross-site Scripting vulnerability |
Critical EPSS 1.06% |
< 0.9.1 | 0.9.1 |
| GHSA-6whj-8g9g-5jvx usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges |
Medium EPSS 0.73% |
< 0.9.1 | 0.9.1 |
| GHSA-6whj-8g9g-5jvx usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges |
Medium EPSS 0.73% |
< 0.9.1 | 0.9.1 |
| GHSA-42q2-m54f-jh95 sememos/memos vulnerable to Improper Handling of Values |
Medium EPSS 0.82% |
< 0.9.1 | 0.9.1 |
| GHSA-42q2-m54f-jh95 sememos/memos vulnerable to Improper Handling of Values |
Medium EPSS 0.82% |
< 0.9.1 | 0.9.1 |
| GHSA-c5hq-35h7-r9x4 usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.35% |
<= 0.9.0 | No fix yet |
| GHSA-642q-2q68-9j3p usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.37% |
< 0.9.1 | 0.9.1 |
| GHSA-642q-2q68-9j3p usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.37% |
< 0.9.1 | 0.9.1 |
| GHSA-vh43-cc6x-prpr usememos/memos vulnerable to Improper Verification of Source of a Communication Channel |
Medium EPSS 0.56% |
< 0.9.1 | 0.9.1 |
| GHSA-vh43-cc6x-prpr usememos/memos vulnerable to Improper Verification of Source of a Communication Channel |
Medium EPSS 0.56% |
< 0.9.1 | 0.9.1 |
| GHSA-r7hg-2cpp-8wqq usememos/memos has Incorrectly Specified Destination in a Communication Channel |
Medium EPSS 0.69% |
< 0.9.1 | 0.9.1 |
| GHSA-r7hg-2cpp-8wqq usememos/memos has Incorrectly Specified Destination in a Communication Channel |
Medium EPSS 0.69% |
< 0.9.1 | 0.9.1 |
| GHSA-cwrm-33qq-4w2x usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.27% |
<= 0.9.0 | No fix yet |
| GHSA-gw9m-2m5v-c6x5 usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.28% |
< 0.9.1 | 0.9.1 |
| GHSA-gw9m-2m5v-c6x5 usememos/memos Cross-Site Request Forgery vulnerability |
Medium EPSS 0.28% |
< 0.9.1 | 0.9.1 |
| GHSA-5jqp-wmhj-g33f usememos/memos Cross-Site Request Forgery vulnerability |
High EPSS 0.33% |
<= 0.9.0 | No fix yet |
| GHSA-rmhx-9h5h-3xh3 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.64% |
< 0.9.1 | 0.9.1 |
| GHSA-pwhr-p68w-296x usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.70% |
< 0.9.1 | 0.9.1 |
| GHSA-gxqf-4g4p-q3hc usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.82% |
< 0.9.1 | 0.9.1 |
| GHSA-6fx9-29x2-fmfj usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.57% |
< 0.9.1 | 0.9.1 |
| GHSA-6fx9-29x2-fmfj usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.57% |
< 0.9.1 | 0.9.1 |
| GHSA-7qpw-2j9m-rw8c usememos/memos has Insufficient Granularity of Access Control |
Medium EPSS 0.57% |
< 0.9.1 | 0.9.1 |
| GHSA-7qpw-2j9m-rw8c usememos/memos has Insufficient Granularity of Access Control |
Medium EPSS 0.57% |
< 0.9.1 | 0.9.1 |
| GHSA-m5pr-wm6q-x4g2 usememos/memos vulnerable to Comparison of Object References Instead of Object Contents |
Medium EPSS 0.62% |
< 0.9.1 | 0.9.1 |
| GHSA-m5pr-wm6q-x4g2 usememos/memos vulnerable to Comparison of Object References Instead of Object Contents |
Medium EPSS 0.62% |
< 0.9.1 | 0.9.1 |
| GHSA-hc5q-26h8-r9wf usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.60% |
< 0.9.1 | 0.9.1 |
| GHSA-hc5q-26h8-r9wf usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.60% |
< 0.9.1 | 0.9.1 |
| GHSA-qf9q-3wwx-8qjv usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.50% |
< 0.9.1 | 0.9.1 |
| GHSA-qf9q-3wwx-8qjv usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.50% |
< 0.9.1 | 0.9.1 |
| GHSA-6w5w-wx8w-2cq9 usememos/memos Improper Access Control vulnerability |
High EPSS 0.97% |
< 0.9.1 | 0.9.1 |
| GHSA-6w5w-wx8w-2cq9 usememos/memos Improper Access Control vulnerability |
High EPSS 0.97% |
< 0.9.1 | 0.9.1 |
| GHSA-r3p3-5f35-h6mf usememos/memos Improper Privilege Management vulnerability |
High EPSS 0.45% |
< 0.9.1 | 0.9.1 |
| GHSA-r3p3-5f35-h6mf usememos/memos Improper Privilege Management vulnerability |
High EPSS 0.45% |
< 0.9.1 | 0.9.1 |
| GHSA-gfj4-wg89-m22r usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.61% |
< 0.9.1 | 0.9.1 |
| GHSA-gfj4-wg89-m22r usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.61% |
< 0.9.1 | 0.9.1 |
| GHSA-pp3p-6jjh-rmg7 usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-pp3p-6jjh-rmg7 usememos/memos Improper Access Control vulnerability |
Medium EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-mq5q-gpgv-pwxw usememos/memos Incorrect Use of Privileged APIs vulnerability |
Medium EPSS 0.54% |
< 0.9.1 | 0.9.1 |
| GHSA-mq5q-gpgv-pwxw usememos/memos Incorrect Use of Privileged APIs vulnerability |
Medium EPSS 0.54% |
< 0.9.1 | 0.9.1 |
| GHSA-qw36-rw5q-gxcq usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.64% |
< 0.9.1 | 0.9.1 |
| GHSA-qw36-rw5q-gxcq usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.64% |
< 0.9.1 | 0.9.1 |
| GHSA-mfmp-8mqg-q4wm usememos/memos Improper Access Control vulnerability |
High EPSS 0.87% |
< 0.9.1 | 0.9.1 |
| GHSA-mfmp-8mqg-q4wm usememos/memos Improper Access Control vulnerability |
High EPSS 0.87% |
< 0.9.1 | 0.9.1 |
| GHSA-rx2m-xr4x-54hh usememos/memos vulnerable to Improper Authorization |
Medium EPSS 0.61% |
< 0.9.1 | 0.9.1 |
| GHSA-rx2m-xr4x-54hh usememos/memos vulnerable to Improper Authorization |
Medium EPSS 0.61% |
< 0.9.1 | 0.9.1 |
| GHSA-f83p-pg86-p922 usememos/memos has Insufficient Granularity of Access Control |
Medium EPSS 0.73% |
< 0.9.1 | 0.9.1 |
| GHSA-f83p-pg86-p922 usememos/memos has Insufficient Granularity of Access Control |
Medium EPSS 0.73% |
< 0.9.1 | 0.9.1 |
| GHSA-mfvq-m3jj-8864 usememos/memos vulnerable to Improper Verification of Source of a Communication Channel |
Medium EPSS 0.63% |
< 0.9.1 | 0.9.1 |
| GHSA-mfvq-m3jj-8864 usememos/memos vulnerable to Improper Verification of Source of a Communication Channel |
Medium EPSS 0.63% |
< 0.9.1 | 0.9.1 |
| GHSA-jvq8-w7qv-hqp6 usememos/memos Improper Authentication vulnerability |
Medium EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-jvq8-w7qv-hqp6 usememos/memos Improper Authentication vulnerability |
Medium EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-qcf5-m2c6-89f2 usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.75% |
< 0.9.1 | 0.9.1 |
| GHSA-qcf5-m2c6-89f2 usememos/memos Improper Authorization vulnerability |
Medium EPSS 0.75% |
< 0.9.1 | 0.9.1 |
| GHSA-qrrf-xvcf-p64q usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts |
Medium EPSS 0.76% |
< 0.9.1 | 0.9.1 |
| GHSA-qrrf-xvcf-p64q usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts |
Medium EPSS 0.76% |
< 0.9.1 | 0.9.1 |
| GHSA-ghx2-6v4g-9wmm usememos/memos makes Incorrect Use of Privileged APIs |
High EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-ghx2-6v4g-9wmm usememos/memos makes Incorrect Use of Privileged APIs |
High EPSS 0.81% |
< 0.9.1 | 0.9.1 |
| GHSA-33m8-f4hw-wm3q usememos/memos Denial of Service vulnerability |
High EPSS 0.72% |
< 0.9.1 | 0.9.1 |
| GHSA-33m8-f4hw-wm3q usememos/memos Denial of Service vulnerability |
High EPSS 0.72% |
< 0.9.1 | 0.9.1 |
| GHSA-j593-h5v3-45x6 usememos/memos may leak user information to an authenticated user |
Medium EPSS 0.83% |
< 0.9.1 | 0.9.1 |
| GHSA-j593-h5v3-45x6 usememos/memos may leak user information to an authenticated user |
Medium EPSS 0.83% |
< 0.9.1 | 0.9.1 |
| GHSA-c2v4-8r9g-g5xj usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.70% |
< 0.9.0 | 0.9.0 |
| GHSA-v92p-phmp-xffr usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.58% |
< 0.9.0 | 0.9.0 |
| GHSA-97rc-mm5j-f6rj usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.74% |
< 0.9.0 | 0.9.0 |
| GHSA-97rc-mm5j-f6rj usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.74% |
< 0.9.0 | 0.9.0 |
| GHSA-f552-97qx-c694 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.60% |
< 0.9.0 | 0.9.0 |
| GHSA-f552-97qx-c694 usememos/memos vulnerable to stored Cross-site Scripting |
Medium EPSS 0.60% |
< 0.9.0 | 0.9.0 |
| GHSA-c8jh-vcjh-fx2w usememos/memos vulnerable to stored cross-site scripting (XSS) |
Medium EPSS 0.64% |
< 0.9.0 | 0.9.0 |
| GHSA-c8jh-vcjh-fx2w usememos/memos vulnerable to stored cross-site scripting (XSS) |
Medium EPSS 0.64% |
< 0.9.0 | 0.9.0 |
| GHSA-w57v-6xp4-rm2v usememos/memos vulnerable to account takeover due to improper access control |
High EPSS 0.79% |
< 0.9.0 | 0.9.0 |
| GHSA-w57v-6xp4-rm2v usememos/memos vulnerable to account takeover due to improper access control |
High EPSS 0.79% |
< 0.9.0 | 0.9.0 |
| GHSA-vwg4-846x-f94v usememos/memos vulnerable to improper authorization |
High EPSS 0.79% |
< 0.9.0 | 0.9.0 |
| GHSA-vwg4-846x-f94v usememos/memos vulnerable to improper authorization |
High EPSS 0.79% |
< 0.9.0 | 0.9.0 |
| GHSA-fv6c-rfg3-gvjw usememos/memos makes Incorrect Use of Privileged APIs |
High EPSS 0.68% |
< 0.9.0 | 0.9.0 |
| GHSA-fv6c-rfg3-gvjw usememos/memos makes Incorrect Use of Privileged APIs |
High EPSS 0.68% |
< 0.9.0 | 0.9.0 |
| GHSA-68gw-r2x5-7r5r usememos/memos Authorization Bypass Through User-Controlled Key vulnerability |
Critical EPSS 0.78% |
< 0.9.0 | 0.9.0 |
| GHSA-68gw-r2x5-7r5r usememos/memos Authorization Bypass Through User-Controlled Key vulnerability |
Critical EPSS 0.78% |
< 0.9.0 | 0.9.0 |
| GHSA-9v48-2h5x-fvpm usememos/memos vulnerable to improper access control |
Medium | < 0.9.0 | 0.9.0 |
| GHSA-9v48-2h5x-fvpm usememos/memos vulnerable to improper access control |
Medium | < 0.9.0 | 0.9.0 |
| GHSA-qr52-59r6-49f4 usememos/memos Improper Access Control vulnerability |
High EPSS 0.65% |
< 0.9.0 | 0.9.0 |
| GHSA-qr52-59r6-49f4 usememos/memos Improper Access Control vulnerability |
High EPSS 0.65% |
< 0.9.0 | 0.9.0 |
| GHSA-qcw2-492v-57xj usememos/memos missing Secure cookie attribute |
Medium EPSS 0.40% |
< 0.9.0 | 0.9.0 |
| GHSA-qcw2-492v-57xj usememos/memos missing Secure cookie attribute |
Medium EPSS 0.40% |
< 0.9.0 | 0.9.0 |
| GHSA-rgj5-jj5q-v3v7 Memos Cross-site Scripting vulnerability |
Medium EPSS 0.75% |
<= 0.8.3 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor