—
GO-2025-3492
Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
Details
Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/usememos/memos
Introduced in:
0No fixed version published yet for github.com/usememos/memos (go modules). Pin to a known-safe version or switch to an alternative.
References
- https://github.com/advisories/GHSA-wfxg-v3j4-7qmj[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2025-22952[ADVISORY]
- https://github.com/usememos/memos/commit/f17774cb3b9612495d89576a91ab3480018cb0b6[FIX]
- https://github.com/usememos/memos/commit/f8c973c938742827baaf6665cfe66805dc8e8d02[FIX]
- https://github.com/usememos/memos/pull/4421[FIX]
- https://github.com/usememos/memos/pull/4428[FIX]
- https://github.com/usememos/memos/issues/4413[REPORT]
- https://elest.io/open-source/memos[WEB]