MEDIUM5.4
GHSA-v92p-phmp-xffr
usememos/memos vulnerable to stored Cross-site Scripting
Quick fix
GHSA-v92p-phmp-xffr — github.com/usememos/memos: upgrade to the fixed version with the command below.
go get github.com/usememos/memos@v0.9.0Details
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/usememos/memos
Introduced in:
0Fixed in: 0.9.0Fix
go get github.com/usememos/memos@v0.9.0