MEDIUM5.4

GHSA-rgj5-jj5q-v3v7

Memos Cross-site Scripting vulnerability

Details

Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting (XSS) in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/usememos/memos

Introduced in: 0

No fixed version published yet for github.com/usememos/memos (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-4609[ADVISORY]
https://github.com/usememos/memos/commit/726285e63467820f94cbf872abe71025a161c212[WEB]
https://github.com/usememos/memos[PACKAGE]
https://huntr.dev/bounties/5b3115c5-776c-43d3-a7be-c8dc13ab81ce[WEB]