{"id":4445560,"name":"github.com/usememos/memos","ecosystem":"go","description":"","homepage":"https://github.com/usememos/memos","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/usememos/memos","keywords_array":[],"namespace":"github.com/usememos","versions_count":100,"first_release_published_at":"2022-05-17T14:17:37.000Z","latest_release_published_at":"2026-09-19T16:50:44.000Z","latest_release_number":"v0.31.0","last_synced_at":"2026-10-15T02:23:42.253Z","created_at":"2022-05-24T15:32:39.243Z","updated_at":"2026-10-15T07:18:49.972Z","registry_url":"https://pkg.go.dev/github.com/usememos/memos","install_command":"go get github.com/usememos/memos","documentation_url":"https://pkg.go.dev/github.com/usememos/memos#section-documentation","metadata":null,"repo_metadata":{"id":37019163,"uuid":"436297812","full_name":"usememos/memos","owner":"usememos","description":"A personal timeline for quick notes. Write short memos, find them later by search, tag, or date. Open source and self-hosted.","archived":false,"fork":false,"pushed_at":"2026-09-28T14:26:11.000Z","size":44763,"stargazers_count":63453,"open_issues_count":93,"forks_count":4799,"subscribers_count":189,"default_branch":"main","last_synced_at":"2026-09-30T18:58:55.285Z","etag":null,"topics":["docker","foss","go","markdown","memo","microblog","note-taking","notes","open-source","own-your-data","react","self-hosted","sqlite","timeline"],"latest_commit_sha":null,"homepage":"https://usememos.com","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/usememos.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"usememos"}},"created_at":"2021-12-08T15:30:18.000Z","updated_at":"2026-09-30T18:49:45.000Z","dependencies_parsed_at":"2026-09-30T18:51:49.604Z","dependency_job_id":null,"html_url":"https://github.com/usememos/memos","commit_stats":{"total_commits":3076,"total_committers":241,"mean_commits":"12.763485477178424","dds":0.4197009102730819,"last_synced_commit":"963706aebd3bba2e6a870a3c150cf2913e765fe8"},"previous_names":["justmemos/memos"],"tags_count":99,"template":false,"template_full_name":null,"purl":"pkg:github/usememos/memos","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/usememos","download_url":"https://codeload.github.com/usememos/memos/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343170754,"owners_count":38106673,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-07T02:00:06.311Z","response_time":58,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"usememos","name":"memos","uuid":"95764151","kind":"organization","description":"A privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.","email":null,"website":"https://usememos.com","location":null,"twitter":"usememos","company":null,"icon_url":"https://avatars.githubusercontent.com/u/95764151?v=4","repositories_count":5,"last_synced_at":"2024-05-01T09:30:41.024Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/usememos","funding_links":["https://github.com/sponsors/usememos"],"total_stars":27048,"followers":294,"following":0,"created_at":"2022-11-14T07:26:55.873Z","updated_at":"2024-05-01T09:30:41.726Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/usememos","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/usememos/repositories"},"tags":[{"name":"v0.31.0","sha":"2b2192d4e153bd04f1d325b60fd880cf00d68b01","kind":"commit","published_at":"2026-09-19T16:50:44.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.31.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.31.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.31.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0/manifests"},{"name":"v0.31.0-rc.2","sha":"80c0c3b46ecd849b3781bba60e7c353d3e2d916e","kind":"commit","published_at":"2026-09-15T01:11:47.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.31.0-rc.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.31.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.31.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0-rc.2/manifests"},{"name":"v0.31.0-rc.1","sha":"80832c0ad19dcc52b2df9fc08a9e3e435d0b09fc","kind":"commit","published_at":"2026-08-30T01:44:33.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.31.0-rc.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.31.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.31.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.31.0-rc.1/manifests"},{"name":"v0.30.0","sha":"2036c1ffc1b0a1e1fa6a473738c2a5ef520df67f","kind":"commit","published_at":"2026-07-26T15:45:43.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.30.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0/manifests"},{"name":"v0.30.0-rc.2","sha":"41dd3d174059d78921326e6f9a9a0da53a777336","kind":"commit","published_at":"2026-07-20T15:35:59.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.30.0-rc.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.30.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.30.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0-rc.2/manifests"},{"name":"v0.30.0-rc.1","sha":"57d579a2a2a977a87cde8b53a7c10f030c9ca772","kind":"commit","published_at":"2026-07-14T16:19:47.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.30.0-rc.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.30.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.30.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.30.0-rc.1/manifests"},{"name":"v0.29.1","sha":"5f194da7d3f71a428b437898cdfd073c66a3df38","kind":"commit","published_at":"2026-06-05T00:06:30.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.29.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.29.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.29.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.29.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.29.1/manifests"},{"name":"v0.29.0","sha":"f22c4bd5c2f5906a689041ecfba91852ec824263","kind":"commit","published_at":"2026-05-27T12:48:29.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.29.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.29.0/manifests"},{"name":"v0.28.0","sha":"9bf648ac911be4729283ef5e34f7f4c9bd86c97e","kind":"commit","published_at":"2026-04-27T00:56:00.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.28.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.28.0/manifests"},{"name":"v0.27.1","sha":"765a8c6e28a0b1e2a9bfab6b88d5847d1501e321","kind":"commit","published_at":"2026-04-19T05:17:09.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.27.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.27.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.27.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.1/manifests"},{"name":"v0.27.0","sha":"1fd6a2a385175399fb515d50d44bee4cda30b40c","kind":"commit","published_at":"2026-04-18T20:02:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.27.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0/manifests"},{"name":"v0.27.0-rc.2","sha":"2523d966f4be7912987ef1e0bb882c000b8b4bca","kind":"commit","published_at":"2026-04-10T14:27:29.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.27.0-rc.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.27.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.27.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0-rc.2/manifests"},{"name":"v0.27.0-rc.1","sha":"201c8a8ea96f506b52ce187528a8b8dc691f827b","kind":"commit","published_at":"2026-03-31T00:34:36.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.27.0-rc.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.27.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.27.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.27.0-rc.1/manifests"},{"name":"v0.26.2","sha":"71263736b017d9ae5e0ba326bd649dcc4fd7fdb2","kind":"commit","published_at":"2026-02-23T12:10:18.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.26.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.26.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.26.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.2/manifests"},{"name":"v0.26.1","sha":"b623162d37f87f9f174d8f6cd8e54c7034cfc789","kind":"commit","published_at":"2026-02-08T13:37:02.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.26.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.1/manifests"},{"name":"v0.26.0","sha":"1696c6c41428f98c06fcaf8838d43bcbf784c413","kind":"commit","published_at":"2026-01-31T15:08:09.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.26.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.26.0/manifests"},{"name":"v0.25.3","sha":"e17cd163c6c37726f8397c8f426d585b540c9562","kind":"commit","published_at":"2025-11-25T14:17:45.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.25.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.25.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.25.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.3/manifests"},{"name":"v0.25.2","sha":"0c0d2a629428ee72f9af074a3fa137ace256d904","kind":"commit","published_at":"2025-10-24T00:15:32.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.25.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.25.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.25.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.2/manifests"},{"name":"v0.25.1","sha":"c3d4f8e9d1f74eb29143f52bb0c2e5e9027c07e5","kind":"commit","published_at":"2025-09-10T13:05:26.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.25.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.1/manifests"},{"name":"v0.25.0","sha":"834f92f67c1bb434328c214006df2348f17af98c","kind":"commit","published_at":"2025-07-16T14:24:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.25.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.25.0/manifests"},{"name":"v0.24.4","sha":"d20362e722ae6efe682007e7eea377a4689e8484","kind":"commit","published_at":"2025-06-02T02:20:11.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.24.4","html_url":"https://github.com/usememos/memos/releases/tag/v0.24.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.24.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.4/manifests"},{"name":"v0.24.3","sha":"fa1ad7dc72050b0875b729baf9988e369186c591","kind":"commit","published_at":"2025-05-12T14:39:25.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.24.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.24.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.24.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.3/manifests"},{"name":"v0.24.2","sha":"44df17aecca70f1a51b3be158c053e6e0d8da961","kind":"commit","published_at":"2025-03-23T03:32:09.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.24.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.24.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.24.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.2/manifests"},{"name":"v0.24.1","sha":"fc7dc58720992198e934a86e020b2187cfb301bd","kind":"commit","published_at":"2025-03-13T12:38:14.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.24.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.24.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.24.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.1/manifests"},{"name":"v0.24.0","sha":"79965864883f86609a9b5f98f8a121b8ab0c22d2","kind":"commit","published_at":"2025-02-05T12:56:46.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.24.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.24.0/manifests"},{"name":"v0.23.1","sha":"75fd4223bff4f4aa068a87ad76170098e688f5bd","kind":"commit","published_at":"2025-01-29T15:41:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.1/manifests"},{"name":"v0.23.0","sha":"ea394d89b27ec087dc005b17bba37ec1cb0e98cc","kind":"commit","published_at":"2024-12-13T05:23:16.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0/manifests"},{"name":"v0.23.0-rc.3","sha":"cb569c99fdeb1bef6fb53e90346819b2ac1be97a","kind":"commit","published_at":"2024-12-07T04:26:21.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.0-rc.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.0-rc.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.0-rc.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.3/manifests"},{"name":"v0.23.0-rc.2","sha":"009f4956ac21bb27180045d1ea224f728d23db9f","kind":"commit","published_at":"2024-11-29T04:23:17.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.0-rc.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.2/manifests"},{"name":"v0.23.0-rc.1","sha":"f007185b8f4878d5168393941b35f42a27b7b82a","kind":"commit","published_at":"2024-11-12T15:23:14.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.0-rc.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.1/manifests"},{"name":"v0.23.0-rc.0","sha":"f59daf839ba24389f0348f6786e1e68e53af56d2","kind":"commit","published_at":"2024-11-02T12:00:00.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.23.0-rc.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.23.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.23.0-rc.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.23.0-rc.0/manifests"},{"name":"v0.22.5","sha":"9612c302c4e897057967112be37f1d4adc0c061c","kind":"commit","published_at":"2024-09-03T14:17:46.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.5","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.5/manifests"},{"name":"v0.22.4","sha":"a94855516611ae56ff2ca9db9816866c3d18ab11","kind":"commit","published_at":"2024-07-28T01:21:09.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.4","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.4/manifests"},{"name":"v0.22.3","sha":"fefe2b0655ee69cfb0f49f357ad59629ac832d01","kind":"commit","published_at":"2024-07-17T15:16:09.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.3/manifests"},{"name":"v0.22.2","sha":"e4a09c407c6e2099462c0388e1441781829ad4b8","kind":"commit","published_at":"2024-06-09T11:22:13.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.2/manifests"},{"name":"v0.22.1","sha":"2e0d5412b468654cc4a9236fbd413abcc2014cf7","kind":"commit","published_at":"2024-06-01T15:46:00.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.1/manifests"},{"name":"v0.22.0","sha":"c25c57ab6194c7f70c0efada290247c741aa5b0d","kind":"commit","published_at":"2024-05-17T23:52:35.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.22.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.22.0/manifests"},{"name":"v0.21.0","sha":"58ae3217ffcb2a9404c41e684aabee31c93bd779","kind":"commit","published_at":"2024-04-09T13:23:17.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.21.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.21.0/manifests"},{"name":"v0.20.1","sha":"8cdc0c7ffabad3a19bc172e7608568dd5453d7b9","kind":"commit","published_at":"2024-03-09T09:26:58.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.20.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.20.1/manifests"},{"name":"v0.20.0","sha":"b0f52ade7ae303daf0b7681fdf5b2634e8706b5b","kind":"commit","published_at":"2024-02-24T15:32:39.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.20.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.20.0/manifests"},{"name":"v0.19.1","sha":"374f3f7d9684b8a692e9a82204fb6a9cc61b7984","kind":"commit","published_at":"2024-02-03T14:03:56.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.19.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.19.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.19.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.19.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.19.1/manifests"},{"name":"v0.19.0","sha":"f05a89315c1fb426f7a63e7a284cde0be7b6e39e","kind":"commit","published_at":"2024-01-28T00:38:29.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.19.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.19.0/manifests"},{"name":"v0.18.2","sha":"22427101f852319cc1b013b913370b79b179aa99","kind":"commit","published_at":"2024-01-18T08:18:18.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.18.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.18.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.18.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.2/manifests"},{"name":"v0.18.1","sha":"749187e1e9970377796a3eaf7c4ff89479dbeabb","kind":"commit","published_at":"2023-12-15T13:46:11.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.18.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.18.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.18.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.1/manifests"},{"name":"v0.18.0","sha":"0916ec35dad46cea7fc271fc5780f15ae145de85","kind":"commit","published_at":"2023-12-10T07:49:29.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.18.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.18.0/manifests"},{"name":"v0.17.1","sha":"e7e83874cd30f4042e969da405795142820f940e","kind":"commit","published_at":"2023-11-19T03:01:21.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.17.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.17.1/manifests"},{"name":"v0.17.0","sha":"68b7bae710e70a728b3359a19f1274eba95269fe","kind":"commit","published_at":"2023-10-29T10:36:35.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.17.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.17.0/manifests"},{"name":"v0.16.1","sha":"1c2d82a62f90eee0560f0ac260459be43e802590","kind":"commit","published_at":"2023-10-21T01:36:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.16.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.16.1/manifests"},{"name":"v0.16.0","sha":"57c5a924271869a5600e78d0f057afc48e7fd24f","kind":"commit","published_at":"2023-10-05T16:34:40.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.16.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.16.0/manifests"},{"name":"v0.15.2","sha":"6cff920f0ca9db2ead9d3c36c28673061dadb959","kind":"commit","published_at":"2023-09-23T12:41:47.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.15.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.2/manifests"},{"name":"v0.15.1","sha":"0f1e87bd930cf3a0077e62c29489e1ab8f18f6aa","kind":"commit","published_at":"2023-09-18T15:28:28.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.15.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"3a1f82effa7a6e582f47fb021729fff98182af3a","kind":"commit","published_at":"2023-09-16T06:10:51.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.15.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.15.0/manifests"},{"name":"v0.14.4","sha":"95588542f9940c3ab431e576a177f26ac61200d2","kind":"commit","published_at":"2023-08-13T15:34:17.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.14.4","html_url":"https://github.com/usememos/memos/releases/tag/v0.14.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.14.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.4/manifests"},{"name":"v0.14.3","sha":"e097e8331e6ae6543fcc5f055f835040fdb6293f","kind":"commit","published_at":"2023-08-05T14:47:29.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.14.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.14.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.14.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.3/manifests"},{"name":"v0.14.2","sha":"8328b5dd4a74dbcd61cd77c3dd56c456089c9517","kind":"commit","published_at":"2023-07-26T14:42:38.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.14.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.2/manifests"},{"name":"v0.14.1","sha":"4231ec5a1ae99679d3d43d31f7694b65f82feeba","kind":"commit","published_at":"2023-07-22T01:58:03.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.14.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.1/manifests"},{"name":"v0.14.0","sha":"589b104671098646ecf3d46b2ea84f210786fbef","kind":"commit","published_at":"2023-07-16T05:48:10.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.14.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.14.0/manifests"},{"name":"v0.13.2","sha":"ca770c87d63e19801b9975eb9a4ed12f80eaa884","kind":"commit","published_at":"2023-07-01T10:01:51.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.13.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.13.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.13.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.2/manifests"},{"name":"v0.13.1","sha":"2e34ce90a118b7b04b45fa93fe7fa177dc28697c","kind":"commit","published_at":"2023-05-27T01:09:41.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.13.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"1d7627dd72b1cf90d931cc2478430911b25ae2fc","kind":"commit","published_at":"2023-05-20T02:16:19.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.13.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.13.0/manifests"},{"name":"v0.12.2","sha":"73b8d1dd9909bf7ceee5c5090e648f6287c701f5","kind":"commit","published_at":"2023-04-16T02:55:44.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.12.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"ef7381f0324e3020123b78d5e6d1657c38c5ac72","kind":"commit","published_at":"2023-04-09T03:51:43.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.12.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"5361f76b1135ad03a3637e1b2e6528e9b9802efd","kind":"commit","published_at":"2023-04-03T15:16:43.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.12.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.12.0/manifests"},{"name":"v0.11.2","sha":"50f36e3ed5aa6f6b9482ce7673a0c2aebac3289e","kind":"commit","published_at":"2023-03-11T05:20:24.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.11.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.2/manifests"},{"name":"v0.11.1","sha":"e150599274de3ddb93cab468be3ea08f3d134507","kind":"commit","published_at":"2023-03-04T10:49:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.11.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"cc23d5cafe9cd482b424ae55cd0f749c7fc13ae2","kind":"commit","published_at":"2023-02-24T00:31:54.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.11.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.11.0/manifests"},{"name":"v0.10.3","sha":"1eacf5367d470120efde6c6d3b35ad996a666514","kind":"commit","published_at":"2023-02-10T04:03:18.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.10.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.10.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.10.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.3/manifests"},{"name":"v0.10.2","sha":"82f61f2a0e0be2b07a280836b1f10c5beb18c3a8","kind":"commit","published_at":"2023-01-21T00:56:26.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.10.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.2/manifests"},{"name":"v0.10.1","sha":"da5178da447f7e5ce5cc402a8cff901f730f75e2","kind":"commit","published_at":"2023-01-14T04:08:56.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.10.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"936927f5bce2e6ffb96445871e6177a095bfd4ed","kind":"commit","published_at":"2023-01-07T04:46:16.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.10.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.10.0/manifests"},{"name":"v0.9.1","sha":"24b21aa9d75d8792d195cc127583c096f3114765","kind":"commit","published_at":"2022-12-31T07:40:53.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.9.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"c0cb01b5279fcdca7810ba932aa57d9f55a9e946","kind":"commit","published_at":"2022-12-23T14:27:22.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.9.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.9.0/manifests"},{"name":"v0.8.3","sha":"7ec22482c16bbcacfbfe369c216c022623601723","kind":"commit","published_at":"2022-12-16T15:12:07.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.8.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.8.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.3/manifests"},{"name":"v0.8.2","sha":"dd6e2337e6ba6665adf9a27672fa8352594ee1a1","kind":"commit","published_at":"2022-12-10T05:23:38.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.8.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.2/manifests"},{"name":"v0.8.1","sha":"e3d76193b909ee09e6fa88a9c7cdd55b852ba4c5","kind":"commit","published_at":"2022-12-02T14:00:03.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.8.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"b511a7b634e9b742a9885c249e65c2b20b3d07e2","kind":"commit","published_at":"2022-11-25T14:34:24.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.8.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.8.0/manifests"},{"name":"v0.7.3","sha":"a2831b37c4574deb29624bb22bed10a3434187e9","kind":"commit","published_at":"2022-11-18T13:17:52.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.7.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.3/manifests"},{"name":"v0.7.2","sha":"fe05e6a464a158c93c4ace12499106cef693a08e","kind":"commit","published_at":"2022-11-12T01:19:44.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.7.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.2/manifests"},{"name":"v0.7.1","sha":"0d6281ef6b01fabb61d8756cf054891e6a5b064b","kind":"commit","published_at":"2022-11-04T12:28:16.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.7.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"8fb59bbfb972938173e4c286998760df9fc99002","kind":"commit","published_at":"2022-10-29T10:18:24.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.7.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.7.0/manifests"},{"name":"v0.6.1","sha":"f09bb2689c04a107feb71678812716832565b5b3","kind":"commit","published_at":"2022-10-21T15:21:37.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.6.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.6.1/manifests"},{"name":"v0.6.0","sha":"d670adc11f2ae565d568ceb5cafb5c14828bfc51","kind":"commit","published_at":"2022-10-14T15:25:07.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.6.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.6.0/manifests"},{"name":"v0.5.0","sha":"4477f47c2507c8205dab5b6a996ccae1c1278d3c","kind":"commit","published_at":"2022-10-03T10:49:11.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.5.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.5.0/manifests"},{"name":"v0.4.5","sha":"e171fbc5b9ff8332068dbe53cfb3c19cd17de2e5","kind":"commit","published_at":"2022-09-24T02:06:26.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.5","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.5/manifests"},{"name":"v0.4.4","sha":"77d8e88351c6dd0665a541bdc7e7daf34a84139c","kind":"commit","published_at":"2022-09-16T16:42:50.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.4","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.4/manifests"},{"name":"v0.4.3","sha":"b8a7df21f2a01f9c603d075b0590ed07ce37b221","kind":"commit","published_at":"2022-09-09T12:00:04.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.3/manifests"},{"name":"v0.4.2","sha":"12a48ae2db053683faa7d2e9d2cb2aefcced937b","kind":"commit","published_at":"2022-09-02T12:20:00.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"75d622f4a2b9664a7ff8305119e00406e56fed43","kind":"commit","published_at":"2022-08-27T00:58:13.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"734d5f3aed2ba6d6f07affdcf5f5e2a2ddc3f654","kind":"commit","published_at":"2022-08-20T03:48:56.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.4.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.4.0/manifests"},{"name":"v0.3.1","sha":"9c084b247fd646ecfc2553e88a1a7323f07ef681","kind":"commit","published_at":"2022-08-06T17:58:00.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.3.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"a24083c47f80f31ad37c2d1636aecbdc6caf2528","kind":"commit","published_at":"2022-07-29T12:37:38.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.3.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.3.0/manifests"},{"name":"v0.2.2","sha":"eea826dd5cb6719dabd101a385627386ea5eba32","kind":"commit","published_at":"2022-07-22T15:42:26.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.2.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.2/manifests"},{"name":"v0.2.1","sha":"9c479d5e56c66dc2f388ea545b6ab2e563d6e9b5","kind":"commit","published_at":"2022-07-15T14:43:57.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.2.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"71eabb31abff04de2baf420795e3270ff801100e","kind":"commit","published_at":"2022-07-09T05:47:55.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.2.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.2.0/manifests"},{"name":"v0.1.3","sha":"565fe0cc567c02deb59fc04830df707ea7476d52","kind":"commit","published_at":"2022-07-01T12:35:36.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.1.3","html_url":"https://github.com/usememos/memos/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"4871ebf24e7e8cdb5eca80c6ede08253d7c84a41","kind":"commit","published_at":"2022-06-24T12:06:47.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.1.2","html_url":"https://github.com/usememos/memos/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"0e9d62b5eb225b74e8966b2146bb8cdc1564f4ae","kind":"commit","published_at":"2022-06-19T03:40:46.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.1.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"8887eecf076ac9b46618c8f1fcb64e3bd96e48d0","kind":"commit","published_at":"2022-05-22T09:40:51.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.1.0","html_url":"https://github.com/usememos/memos/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.1.0/manifests"},{"name":"v0.0.1","sha":"685bbc7d259c69d41d9a68e6036602cb9a97f50d","kind":"commit","published_at":"2022-05-17T14:17:37.000Z","download_url":"https://codeload.github.com/usememos/memos/tar.gz/v0.0.1","html_url":"https://github.com/usememos/memos/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/usememos/memos@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-10-07T20:55:52.055Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.297010515822919,"dependent_packages_count":8.17154093257566,"stargazers_count":0.5268295028893647,"forks_count":0.9082890392138218,"docker_downloads_count":0.9831600370310863,"average":3.9773660055065703},"purl":"pkg:golang/github.com/usememos/memos","advisories":[{"uuid":"GSA_kwCzR0hTQS1ncXAzLWhmYzMtOHE1NM4ABVe7","url":"https://github.com/advisories/GHSA-gqp3-hfc3-8q54","title":"Memos has an Incorrect Privilege Assignment issue","description":"A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2026-04-20T12:32:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-6634","https://github.com/Dave-gilmore-aus/security-advisories/blob/main/usememos-security-advisory","https://vuldb.com/submit/793432","https://vuldb.com/vuln/358268","https://vuldb.com/vuln/358268/cti","https://github.com/advisories/GHSA-gqp3-hfc3-8q54"],"source_kind":"github","identifiers":["GHSA-gqp3-hfc3-8q54","CVE-2026-6634"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-29T00:00:09.718Z","updated_at":"2026-10-15T07:03:52.475Z","epss_percentage":0.00347,"epss_percentile":0.26622,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncXAzLWhmYzMtOHE1NM4ABVe7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ncXAzLWhmYzMtOHE1NM4ABVe7","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.22.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncXAzLWhmYzMtOHE1NM4ABVe7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tZzU2LXdjNHEtcnc0d84ABPUD","url":"https://github.com/advisories/GHSA-mg56-wc4q-rw4w","title":"memos vulnerability allows the creation of arbitrary accounts","description":"Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create arbitrary accounts via a crafted request.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-12-08T18:30:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-65795","https://github.com/usememos/memos/pull/5217","https://herolab.usd.de/usd-2025-0058","http://memos.com","http://usememos.com","https://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c","https://github.com/advisories/GHSA-mg56-wc4q-rw4w"],"source_kind":"github","identifiers":["GHSA-mg56-wc4q-rw4w","CVE-2025-65795"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-09T15:00:07.955Z","updated_at":"2026-09-28T20:06:08.642Z","epss_percentage":0.00257,"epss_percentile":0.15544,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZzU2LXdjNHEtcnc0d84ABPUD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tZzU2LXdjNHEtcnc0d84ABPUD","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.25.3","vulnerable_version_range":"\u003c 0.25.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZzU2LXdjNHEtcnc0d84ABPUD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05OW0yLXF3eDYtMnc2Zs4ABPT4","url":"https://github.com/advisories/GHSA-99m2-qwx6-2w6f","title":"memos vulnerability allows arbitrarily modification or deletion registered identity providers","description":"Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service (DoS).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-12-08T18:30:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-65797","https://github.com/usememos/memos/pull/5217","https://herolab.usd.de/security-advisories/usd-2025-0057","http://memos.com","http://usememos.com","https://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c","https://github.com/advisories/GHSA-99m2-qwx6-2w6f"],"source_kind":"github","identifiers":["GHSA-99m2-qwx6-2w6f","CVE-2025-65797"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-09T18:00:07.642Z","updated_at":"2026-09-28T20:06:08.638Z","epss_percentage":0.00283,"epss_percentile":0.18529,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05OW0yLXF3eDYtMnc2Zs4ABPT4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05OW0yLXF3eDYtMnc2Zs4ABPT4","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.25.3","vulnerable_version_range":"\u003c 0.25.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05OW0yLXF3eDYtMnc2Zs4ABPT4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xZ2pwLTVnNXgtdmhxMs4ABPT5","url":"https://github.com/advisories/GHSA-qgjp-5g5x-vhq2","title":"memos lacks file name validation or verification","description":"A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-12-08T18:30:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-65799","https://github.com/usememos/memos/pull/5218","https://herolab.usd.de/security-advisories/usd-2025-0056","http://memos.com","http://usememos.com","https://github.com/usememos/memos/commit/5f57f48673e2054f404b2c5b497a8eaa3690591d","https://github.com/advisories/GHSA-qgjp-5g5x-vhq2"],"source_kind":"github","identifiers":["GHSA-qgjp-5g5x-vhq2","CVE-2025-65799"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-09T15:00:07.955Z","updated_at":"2026-10-02T15:06:17.796Z","epss_percentage":0.00214,"epss_percentile":0.10546,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZ2pwLTVnNXgtdmhxMs4ABPT5","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xZ2pwLTVnNXgtdmhxMs4ABPT5","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.25.3","vulnerable_version_range":"\u003c 0.25.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZ2pwLTVnNXgtdmhxMs4ABPT5/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04cDQ0LWc1NzItNTU3aM4ABPS7","url":"https://github.com/advisories/GHSA-8p44-g572-557h","title":"memos vulnerability allows arbitrarily modification or deletion of attachments","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-12-08T18:30:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-65798","https://github.com/usememos/memos/pull/5217","https://herolab.usd.de/security-advisories/usd-2025-0059","http://memos.com","http://usememos.com","https://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c","https://github.com/advisories/GHSA-8p44-g572-557h"],"source_kind":"github","identifiers":["GHSA-8p44-g572-557h","CVE-2025-65798"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-09T15:00:07.955Z","updated_at":"2026-09-25T12:06:40.400Z","epss_percentage":0.0018,"epss_percentile":0.0673,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04cDQ0LWc1NzItNTU3aM4ABPS7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04cDQ0LWc1NzItNTU3aM4ABPS7","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.25.3","vulnerable_version_range":"\u003c 0.25.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04cDQ0LWc1NzItNTU3aM4ABPS7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04amNqLWc5ZjQtcXg0Ms4ABPTW","url":"https://github.com/advisories/GHSA-8jcj-g9f4-qx42","title":"memos vulnerability allows arbitrarily reactions deletion","description":"Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-12-08T18:30:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-65796","https://github.com/usememos/memos/pull/5217","https://herolab.usd.de/security-advisories/usd-2025-0060","http://memos.com","http://usememos.com","https://github.com/usememos/memos/commit/769dcd0cf9be83d472829f6e7903b201e42f6b3c","https://github.com/advisories/GHSA-8jcj-g9f4-qx42"],"source_kind":"github","identifiers":["GHSA-8jcj-g9f4-qx42","CVE-2025-65796"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-09T15:00:07.955Z","updated_at":"2026-09-25T12:06:40.400Z","epss_percentage":0.00199,"epss_percentile":0.08626,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04amNqLWc5ZjQtcXg0Ms4ABPTW","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04amNqLWc5ZjQtcXg0Ms4ABPTW","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.25.3","vulnerable_version_range":"\u003c 0.25.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04amNqLWc5ZjQtcXg0Ms4ABPTW/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tcjM0LTg3MzMtZ3JyMs4ABOkJ","url":"https://github.com/advisories/GHSA-mr34-8733-grr2","title":"Memos' Access Tokens Stay Valid after User Password Change","description":"### Summary\nAccess Tokens are used to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update their password. \n\nThe bad actor though will still have access to their account because the bad actor's Access Token stays on the list as a valid token. The user will have to manually delete the bad actor's Access Token to secure their account. The list of Access Tokens has a generic Description which makes it hard to pinpoint a bad actor in a list of Access Tokens. \n\n### Details\n\nTo improve Memos security, all Access Tokens will need to be revoked when a user changes their password. This removes the session for all the user's devices and prompts the user to log in again. You can treat the old Access Tokens as \"invalid\" because those Access Tokens were created with the older password.\n\n### PoC\n\n1. Have 2 devices on hand\n2. Log onto your Memos account on both devices. Notice how Access Tokens are created for each.\n3. On one device, successfully change the password. Refresh the page on the 2nd device and notice how it doesn't log out the user.\n4. On the 2nd device, change the password again. Refresh the page on the 1st device and notice how it doesn't log out the user.\n\n### Impact\n\nA bad actor will still have access to the user's account because the Access Token does not expire on a password update. Having multi-factor authentication will vastly improve account security in Account Takeover cases instead of just relying on a password.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-11-14T22:09:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/usememos/memos/security/advisories/GHSA-mr34-8733-grr2","https://nvd.nist.gov/vuln/detail/CVE-2024-21635","https://owasp.org/Top10/A04_2021-Insecure_Design","http://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures","https://github.com/usememos/memos/releases/tag/v0.18.2","https://github.com/advisories/GHSA-mr34-8733-grr2"],"source_kind":"github","identifiers":["GHSA-mr34-8733-grr2","CVE-2024-21635"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-11-14T23:00:07.526Z","updated_at":"2026-10-12T12:06:57.592Z","epss_percentage":0.00286,"epss_percentile":0.195,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcjM0LTg3MzMtZ3JyMs4ABOkJ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tcjM0LTg3MzMtZ3JyMs4ABOkJ","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.18.2","vulnerable_version_range":"\u003c= 0.18.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcjM0LTg3MzMtZ3JyMs4ABOkJ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jZ3JnLTg2bTUteG00d84ABLqb","url":"https://github.com/advisories/GHSA-cgrg-86m5-xm4w","title":"Memos Vulnerable to Stored Cross-Site Scripting","description":"Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features. Memos does not verify the content type of the uploaded data and serve it back as is. An authenticated attacker can use this to elevate their privileges when the stored XSS is viewed by an admin.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-04T15:30:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-56761","https://github.com/usememos/memos/blob/v0.24.0/server/router/api/v1/user_service.go#L147","https://github.com/usememos/memos/blob/v0.24.4/server/router/api/v1/resource_service.go#L48","https://www.sonarsource.com/blog/securing-go-applications-with-sonarqube-real-world-examples","https://github.com/advisories/GHSA-cgrg-86m5-xm4w"],"source_kind":"github","identifiers":["GHSA-cgrg-86m5-xm4w","CVE-2025-56761"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2025-09-05T16:09:53.383Z","updated_at":"2026-09-25T12:07:23.380Z","epss_percentage":0.00259,"epss_percentile":0.15651,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jZ3JnLTg2bTUteG00d84ABLqb","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jZ3JnLTg2bTUteG00d84ABLqb","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.22.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jZ3JnLTg2bTUteG00d84ABLqb/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03OGo1LTh2cTctanh2Nc4ABLqc","url":"https://github.com/advisories/GHSA-78j5-8vq7-jxv5","title":"Memos Vulnerable to Path Traversal via the CreateResource Endpoint","description":"When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbitrary file write on the server.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-04T15:30:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-56760","https://github.com/usememos/memos/blob/v0.24.4/server/router/api/v1/resource_service.go#L48","https://www.sonarsource.com/blog/securing-go-applications-with-sonarqube-real-world-examples","https://github.com/advisories/GHSA-78j5-8vq7-jxv5"],"source_kind":"github","identifiers":["GHSA-78j5-8vq7-jxv5","CVE-2025-56760"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2025-09-05T16:10:00.910Z","updated_at":"2026-10-05T15:06:39.108Z","epss_percentage":0.00351,"epss_percentile":0.26515,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGo1LTh2cTctanh2Nc4ABLqc","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03OGo1LTh2cTctanh2Nc4ABLqc","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.22.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGo1LTh2cTctanh2Nc4ABLqc/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oZmNmLTc5Z2gtZjNqY84ABKnD","url":"https://github.com/advisories/GHSA-hfcf-79gh-f3jc","title":"Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs","description":"The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-07-29T15:31:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.2,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:P","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-50738","https://github.com/usememos/memos/issues/4707#issuecomment-2898504237","https://github.com/usememos/memos/commit/46d5307d7f210067b46e07400a728fa9095803d9","https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738","https://github.com/advisories/GHSA-hfcf-79gh-f3jc"],"source_kind":"github","identifiers":["GHSA-hfcf-79gh-f3jc","CVE-2025-50738"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2025-07-29T23:08:27.759Z","updated_at":"2026-10-02T15:07:14.616Z","epss_percentage":0.02161,"epss_percentile":0.81528,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oZmNmLTc5Z2gtZjNqY84ABKnD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oZmNmLTc5Z2gtZjNqY84ABKnD","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.24.4","vulnerable_version_range":"\u003c 0.24.4"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oZmNmLTc5Z2gtZjNqY84ABKnD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13ZnhnLXYzajQtN3Ftas4ABE3M","url":"https://github.com/advisories/GHSA-wfxg-v3j4-7qmj","title":"Memos Server-Side Request Forgery (SSRF)","description":"elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-02-27T21:32:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-22952","https://github.com/usememos/memos/issues/4413","https://github.com/usememos/memos/pull/4428","https://elest.io/open-source/memos","https://github.com/usememos/memos","https://github.com/usememos/memos/pull/4421","https://github.com/usememos/memos/commit/f17774cb3b9612495d89576a91ab3480018cb0b6","https://github.com/usememos/memos/commit/f8c973c938742827baaf6665cfe66805dc8e8d02","https://github.com/advisories/GHSA-wfxg-v3j4-7qmj"],"source_kind":"github","identifiers":["GHSA-wfxg-v3j4-7qmj","CVE-2025-22952"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2025-02-28T18:07:21.042Z","updated_at":"2026-09-24T15:07:26.856Z","epss_percentage":0.02932,"epss_percentile":0.86506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZnhnLXYzajQtN3Ftas4ABE3M","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13ZnhnLXYzajQtN3Ftas4ABE3M","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.24.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZnhnLXYzajQtN3Ftas4ABE3M/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01cjJnLTU5cHgtM3E5d84ABBYl","url":"https://github.com/advisories/GHSA-5r2g-59px-3q9w","title":"Stored XSS using two files in usememos/memos","description":"A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-11-15T12:31:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0109","https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c","https://huntr.com/bounties/1899ffb2-ce1e-4dc0-af96-972612190f6e","https://pkg.go.dev/vuln/GO-2024-3274","https://github.com/advisories/GHSA-5r2g-59px-3q9w"],"source_kind":"github","identifiers":["GHSA-5r2g-59px-3q9w","CVE-2023-0109"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2024-11-15T21:07:09.230Z","updated_at":"2026-10-08T07:54:51.368Z","epss_percentage":0.00444,"epss_percentile":0.36547,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cjJnLTU5cHgtM3E5d84ABBYl","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01cjJnLTU5cHgtM3E5d84ABBYl","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cjJnLTU5cHgtM3E5d84ABBYl/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wNGZ4LXFmMmgtanBtas4AA-4e","url":"https://github.com/advisories/GHSA-p4fx-qf2h-jpmj","title":"memos CORS Misconfiguration in server.go (GHSL-2024-034)","description":"memos is a privacy-first, lightweight note-taking service. A CORS misconfiguration exists in memos 0.20.1 and earlier where an arbitrary origin is reflected with Access-Control-Allow-Credentials set to true. This may allow an attacking website to make a cross-origin request, allowing the attacker to read private information or make privileged changes to the system as the vulnerable user account.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-08-22T17:18:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-41659","https://github.com/usememos/memos/commit/8101a5e0b162044c16385bee4f12a4a653d050b9","https://github.com/usememos/memos/blob/v0.20.1/server/server.go#L163","https://securitylab.github.com/advisories/GHSL-2024-034_memos","https://github.com/advisories/GHSA-p4fx-qf2h-jpmj"],"source_kind":"github","identifiers":["GHSA-p4fx-qf2h-jpmj","CVE-2024-41659"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2024-08-22T18:05:39.290Z","updated_at":"2026-10-15T07:09:07.997Z","epss_percentage":0.00643,"epss_percentile":0.49653,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNGZ4LXFmMmgtanBtas4AA-4e","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wNGZ4LXFmMmgtanBtas4AA-4e","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.21.0","vulnerable_version_range":"\u003c 0.21.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNGZ4LXFmMmgtanBtas4AA-4e/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02NWZtLTJqZ3Itajdxcc4AA-Yu","url":"https://github.com/advisories/GHSA-65fm-2jgr-j7qq","title":"memos vulnerable to Server-Side Request Forgery in /api/resource","description":"memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the `/api/resource` that allows authenticated users to enumerate the internal network. Version 0.22.0 of memos removes the vulnerable file.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-08-05T21:29:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-29030","https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c549641455892b9eb5","https://github.com/usememos/memos/blob/06dbd8731161245444f4b50f4f9ed267f7c3cf63/api/v1/resource.go#L83","https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos","https://github.com/advisories/GHSA-65fm-2jgr-j7qq"],"source_kind":"github","identifiers":["GHSA-65fm-2jgr-j7qq","CVE-2024-29030"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2024-08-05T22:05:30.701Z","updated_at":"2026-10-12T12:13:39.180Z","epss_percentage":0.01135,"epss_percentile":0.65525,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NWZtLTJqZ3Itajdxcc4AA-Yu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02NWZtLTJqZ3Itajdxcc4AA-Yu","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.22.0","vulnerable_version_range":"\u003c 0.22.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NWZtLTJqZ3Itajdxcc4AA-Yu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05Y3FtLW1ndjktdnY5as4AA-Yt","url":"https://github.com/advisories/GHSA-9cqm-mgv9-vv9j","title":"memos vulnerable to Server-Side Request Forgery and Cross-site Scripting","description":"memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the `/o/get/image` that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-08-05T21:29:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-29029","https://github.com/usememos/memos/commit/bbd206e8930281eb040cc8c549641455892b9eb5","https://github.com/usememos/memos/blob/06dbd8731161245444f4b50f4f9ed267f7c3cf63/api/v1/http_getter.go#L29","https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos","https://github.com/advisories/GHSA-9cqm-mgv9-vv9j"],"source_kind":"github","identifiers":["GHSA-9cqm-mgv9-vv9j","CVE-2024-29029"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2024-08-05T22:05:30.722Z","updated_at":"2026-09-24T15:08:49.051Z","epss_percentage":0.0108,"epss_percentile":0.6365,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Y3FtLW1ndjktdnY5as4AA-Yt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05Y3FtLW1ndjktdnY5as4AA-Yt","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.22.0","vulnerable_version_range":"\u003c 0.22.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Y3FtLW1ndjktdnY5as4AA-Yt/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02ZmNmLWczbXAteGoyeM4AA-Yq","url":"https://github.com/advisories/GHSA-6fcf-g3mp-xj2x","title":"memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta","description":"memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-08-05T21:29:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-29028","https://github.com/usememos/memos/commit/6ffc09d86a1302c384ef085aa70c7bddb3ce7ba9","https://securitylab.github.com/advisories/GHSL-2023-154_GHSL-2023-156_memos","https://github.com/advisories/GHSA-6fcf-g3mp-xj2x"],"source_kind":"github","identifiers":["GHSA-6fcf-g3mp-xj2x","CVE-2024-29028"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2024-08-05T22:05:31.174Z","updated_at":"2026-10-15T07:09:12.564Z","epss_percentage":0.01049,"epss_percentile":0.63533,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02ZmNmLWczbXAteGoyeM4AA-Yq","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02ZmNmLWczbXAteGoyeM4AA-Yq","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.16.1","vulnerable_version_range":"\u003c 0.16.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02ZmNmLWczbXAteGoyeM4AA-Yq/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yZzdyLTl4cTUtYzZods4AA167","url":"https://github.com/advisories/GHSA-2g7r-9xq5-c6hv","title":"Cross-Site Request Forgery (CSRF) in  usememos/memos","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-09-18T06:30:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-5036","https://github.com/usememos/memos/commit/97b434722cf0abe3cfcad5ac9e3d520233bf1536","https://huntr.dev/bounties/46881df7-eb41-4ce2-a78f-82de9bc4fc2d","https://github.com/advisories/GHSA-2g7r-9xq5-c6hv"],"source_kind":"github","identifiers":["GHSA-2g7r-9xq5-c6hv","CVE-2023-5036"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-09-18T20:05:51.363Z","updated_at":"2026-10-08T07:59:15.665Z","epss_percentage":0.00316,"epss_percentile":0.22557,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yZzdyLTl4cTUtYzZods4AA167","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yZzdyLTl4cTUtYzZods4AA167","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.15.1","vulnerable_version_range":"\u003c 0.15.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yZzdyLTl4cTUtYzZods4AA167/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05NmdxLTZjaDUtbW01NM4AA1nF","url":"https://github.com/advisories/GHSA-96gq-6ch5-mm54","title":"usememos/memos vulnerable to improper input validation","description":"Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-09-01T03:30:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-4698","https://github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd","https://huntr.dev/bounties/e1107d79-1d63-4238-90b7-5cc150512654","https://github.com/advisories/GHSA-96gq-6ch5-mm54"],"source_kind":"github","identifiers":["GHSA-96gq-6ch5-mm54","CVE-2023-4698"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-09-01T22:05:23.907Z","updated_at":"2026-09-30T09:14:25.927Z","epss_percentage":0.00916,"epss_percentile":0.58533,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NmdxLTZjaDUtbW01NM4AA1nF","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05NmdxLTZjaDUtbW01NM4AA1nF","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c 0.13.2"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NmdxLTZjaDUtbW01NM4AA1nF/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01ajZwLTU5Y2otajZjcM4AA1nE","url":"https://github.com/advisories/GHSA-5j6p-59cj-j6cp","title":"usememos/memos vulnerable to privilege escalation","description":"Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-09-01T03:30:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-4697","https://github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd","https://huntr.dev/bounties/3ff3325a-1dcb-4da7-894d-81a9cf726d81","https://github.com/advisories/GHSA-5j6p-59cj-j6cp"],"source_kind":"github","identifiers":["GHSA-5j6p-59cj-j6cp","CVE-2023-4697"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-09-01T22:05:23.923Z","updated_at":"2026-10-03T14:12:00.956Z","epss_percentage":0.00846,"epss_percentile":0.56522,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ajZwLTU5Y2otajZjcM4AA1nE","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01ajZwLTU5Y2otajZjcM4AA1nE","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.13.2","vulnerable_version_range":"\u003c 0.13.2"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01ajZwLTU5Y2otajZjcM4AA1nE/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qMmdqLWczcDktN21ycs4AA1nC","url":"https://github.com/advisories/GHSA-j2gj-g3p9-7mrr","title":"Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos","description":"Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. As of commit `c9aa2eeb9` access tokens which fail validation are rejected.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-09-01T03:30:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-4696","https://github.com/usememos/memos/commit/c9aa2eeb9852047e4f41915eb30726bd25f07ecd","https://huntr.dev/bounties/4747a485-77c3-4bb5-aab0-21253ef303ca","https://github.com/advisories/GHSA-j2gj-g3p9-7mrr"],"source_kind":"github","identifiers":["GHSA-j2gj-g3p9-7mrr","CVE-2023-4696"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-09-01T22:05:23.999Z","updated_at":"2026-09-24T15:13:00.316Z","epss_percentage":0.0112,"epss_percentile":0.64731,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qMmdqLWczcDktN21ycs4AA1nC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qMmdqLWczcDktN21ycs4AA1nC","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.13.2","vulnerable_version_range":"\u003c 0.13.2"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qMmdqLWczcDktN21ycs4AA1nC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05dzh4LTVodjUtcjZnd84AAxpQ","url":"https://github.com/advisories/GHSA-9w8x-5hv5-r6gw","title":"Cross Site Scripting in usememos/memos","description":"All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-02-15T06:30:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-25978","https://github.com/usememos/memos/issues/1026","https://github.com/usememos/memos/commit/b11d2130a084385eb65c3761a3c841ebe9f81ae8","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUSEMEMOSMEMOSSERVER-3319070","https://pkg.go.dev/vuln/GO-2023-1566","https://github.com/advisories/GHSA-9w8x-5hv5-r6gw"],"source_kind":"github","identifiers":["GHSA-9w8x-5hv5-r6gw","CVE-2022-25978"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-02-15T19:03:12.936Z","updated_at":"2026-10-15T07:11:40.999Z","epss_percentage":0.00534,"epss_percentile":0.43528,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05dzh4LTVodjUtcjZnd84AAxpQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05dzh4LTVodjUtcjZnd84AAxpQ","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.4-0.20230211093429-b11d2130a084","vulnerable_version_range":"\u003c 0.10.4-0.20230211093429-b11d2130a084"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05dzh4LTVodjUtcjZnd84AAxpQ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wY3ZoLXB4MnAtdm14d84AAwyz","url":"https://github.com/advisories/GHSA-pcvh-px2p-vmxw","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0107","https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7","https://huntr.dev/bounties/0b28fa57-acb0-47c8-ac48-962ff3898156","https://github.com/advisories/GHSA-pcvh-px2p-vmxw"],"source_kind":"github","identifiers":["GHSA-pcvh-px2p-vmxw","CVE-2023-0107"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.515Z","updated_at":"2026-10-05T15:14:33.274Z","epss_percentage":0.00498,"epss_percentile":0.40506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wY3ZoLXB4MnAtdm14d84AAwyz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wY3ZoLXB4MnAtdm14d84AAwyz","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wY3ZoLXB4MnAtdm14d84AAwyz/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04Njg2LTRjcjMtNzZ3as4AAwyw","url":"https://github.com/advisories/GHSA-8686-4cr3-76wj","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0106","https://github.com/usememos/memos/commit/0f8ce3dd1696722f951d7195ad1f88b39a5d15d7","https://huntr.dev/bounties/5c0809cb-f4ff-4447-bed6-b5625fb374bb","https://github.com/advisories/GHSA-8686-4cr3-76wj"],"source_kind":"github","identifiers":["GHSA-8686-4cr3-76wj","CVE-2023-0106"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.526Z","updated_at":"2026-10-15T07:14:29.253Z","epss_percentage":0.00645,"epss_percentile":0.49549,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04Njg2LTRjcjMtNzZ3as4AAwyw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04Njg2LTRjcjMtNzZ3as4AAwyw","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04Njg2LTRjcjMtNzZ3as4AAwyw/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mcGpjLWN4cjYtdzZoOM4AAwyy","url":"https://github.com/advisories/GHSA-fpjc-cxr6-w6h8","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0108","https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c","https://huntr.dev/bounties/f66d33df-6588-4ab4-80a0-847451517944","https://github.com/advisories/GHSA-fpjc-cxr6-w6h8"],"source_kind":"github","identifiers":["GHSA-fpjc-cxr6-w6h8","CVE-2023-0108"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.537Z","updated_at":"2026-10-15T07:14:29.253Z","epss_percentage":0.00519,"epss_percentile":0.42547,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mcGpjLWN4cjYtdzZoOM4AAwyy","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mcGpjLWN4cjYtdzZoOM4AAwyy","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mcGpjLWN4cjYtdzZoOM4AAwyy/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14MjJ2LXFnbTItN3FjN84AAwyx","url":"https://github.com/advisories/GHSA-x22v-qgm2-7qc7","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0110","https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c","https://huntr.dev/bounties/6e4a1961-dbca-46f6-ae21-c25a621e54a7","https://github.com/advisories/GHSA-x22v-qgm2-7qc7"],"source_kind":"github","identifiers":["GHSA-x22v-qgm2-7qc7","CVE-2023-0110"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.548Z","updated_at":"2026-10-05T15:14:33.275Z","epss_percentage":0.00498,"epss_percentile":0.40517,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14MjJ2LXFnbTItN3FjN84AAwyx","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14MjJ2LXFnbTItN3FjN84AAwyx","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14MjJ2LXFnbTItN3FjN84AAwyx/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05aDd4LTlwbWgtN2dnOM4AAwyu","url":"https://github.com/advisories/GHSA-9h7x-9pmh-7gg8","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0112","https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c","https://huntr.dev/bounties/ec2a29dc-79a3-44bd-a58b-15f676934af6","https://github.com/advisories/GHSA-9h7x-9pmh-7gg8"],"source_kind":"github","identifiers":["GHSA-9h7x-9pmh-7gg8","CVE-2023-0112"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.579Z","updated_at":"2026-10-05T15:14:33.276Z","epss_percentage":0.00575,"epss_percentile":0.45525,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05aDd4LTlwbWgtN2dnOM4AAwyu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05aDd4LTlwbWgtN2dnOM4AAwyu","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05aDd4LTlwbWgtN2dnOM4AAwyu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oMnBoLTlyNzYtMzd2Nc4AAwyv","url":"https://github.com/advisories/GHSA-h2ph-9r76-37v5","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-07T06:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-0111","https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c","https://huntr.dev/bounties/70da256c-977a-487e-8a6a-9ae22caedbe3","https://github.com/advisories/GHSA-h2ph-9r76-37v5"],"source_kind":"github","identifiers":["GHSA-h2ph-9r76-37v5","CVE-2023-0111"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T22:03:23.567Z","updated_at":"2026-10-05T15:14:33.275Z","epss_percentage":0.00498,"epss_percentile":0.40518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMnBoLTlyNzYtMzd2Nc4AAwyv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oMnBoLTlyNzYtMzd2Nc4AAwyv","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.10.0","vulnerable_version_range":"\u003c 0.10.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMnBoLTlyNzYtMzd2Nc4AAwyv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04dzVxLTVmcHEtdjRwbc4AAwrb","url":"https://github.com/advisories/GHSA-8w5q-5fpq-v4pm","title":"usememos/memos Cross-site Scripting vulnerability","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-12-31T09:30:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.0,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4865","https://github.com/usememos/memos/commit/7670c9536000bb32c6345d4906a91268dcddd5fc","https://huntr.dev/bounties/cd8765a2-bf28-4019-8647-882ccf63b2be","https://github.com/advisories/GHSA-8w5q-5fpq-v4pm"],"source_kind":"github","identifiers":["GHSA-8w5q-5fpq-v4pm","CVE-2022-4865"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-04T16:03:32.052Z","updated_at":"2026-10-15T07:14:31.725Z","epss_percentage":0.0102,"epss_percentile":0.62642,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04dzVxLTVmcHEtdjRwbc4AAwrb","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04dzVxLTVmcHEtdjRwbc4AAwrb","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c 0.9.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04dzVxLTVmcHEtdjRwbc4AAwrb/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14OXA5LXYzeDYtNjhtcc4AAwra","url":"https://github.com/advisories/GHSA-x9p9-v3x6-68mq","title":"usememos/memos vulnerable to Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-12-31T09:30:42.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.0,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4866","https://github.com/usememos/memos/commit/7670c9536000bb32c6345d4906a91268dcddd5fc","https://huntr.dev/bounties/39c04778-6228-4f07-bdd4-ab17f246dbff","https://github.com/advisories/GHSA-x9p9-v3x6-68mq"],"source_kind":"github","identifiers":["GHSA-x9p9-v3x6-68mq","CVE-2022-4866"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-04T16:03:32.071Z","updated_at":"2026-10-15T07:14:31.725Z","epss_percentage":0.0102,"epss_percentile":0.62642,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14OXA5LXYzeDYtNjhtcc4AAwra","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14OXA5LXYzeDYtNjhtcc4AAwra","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c 0.9.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14OXA5LXYzeDYtNjhtcc4AAwra/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02d2hqLThnOWctNWp2eM4AAwqm","url":"https://github.com/advisories/GHSA-6whj-8g9g-5jvx","title":"usememos/memos vulnerable to Improper Handling of Insufficient Permissions or Privileges","description":"Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-30T18:30:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4863","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/42751929-e511-49a9-888d-d5b610da2a45","https://github.com/advisories/GHSA-6whj-8g9g-5jvx"],"source_kind":"github","identifiers":["GHSA-6whj-8g9g-5jvx","CVE-2022-4863"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-04T16:03:32.080Z","updated_at":"2026-10-12T14:14:00.956Z","epss_percentage":0.00698,"epss_percentile":0.51729,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02d2hqLThnOWctNWp2eM4AAwqm","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02d2hqLThnOWctNWp2eM4AAwqm","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c 0.9.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02d2hqLThnOWctNWp2eM4AAwqm/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wd2hyLXA2OHctMjk2eM4AAwqE","url":"https://github.com/advisories/GHSA-pwhr-p68w-296x","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4840","https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8","https://huntr.dev/bounties/b42aa2e9-c783-464c-915c-a80cb464ee01","https://github.com/advisories/GHSA-pwhr-p68w-296x"],"source_kind":"github","identifiers":["GHSA-pwhr-p68w-296x","CVE-2022-4840"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.253Z","updated_at":"2026-10-12T14:14:00.911Z","epss_percentage":0.00671,"epss_percentile":0.50531,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wd2hyLXA2OHctMjk2eM4AAwqE","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wd2hyLXA2OHctMjk2eM4AAwqE","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wd2hyLXA2OHctMjk2eM4AAwqE/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ndzltLTJtNXYtYzZ4Nc4AAwp7","url":"https://github.com/advisories/GHSA-gw9m-2m5v-c6x5","title":"usememos/memos Cross-Site Request Forgery vulnerability","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4845","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/075dbd51-b078-436c-9e3d-7f25cd2e7e1b","https://github.com/advisories/GHSA-gw9m-2m5v-c6x5"],"source_kind":"github","identifiers":["GHSA-gw9m-2m5v-c6x5","CVE-2022-4845"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.274Z","updated_at":"2026-10-12T14:14:00.912Z","epss_percentage":0.00266,"epss_percentile":0.17006,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ndzltLTJtNXYtYzZ4Nc4AAwp7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ndzltLTJtNXYtYzZ4Nc4AAwp7","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ndzltLTJtNXYtYzZ4Nc4AAwp7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yN2hnLTJjcHAtOHdxcc4AAwp_","url":"https://github.com/advisories/GHSA-r7hg-2cpp-8wqq","title":"usememos/memos has Incorrectly Specified Destination in a Communication Channel","description":"Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4847","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/ff6d4b5a-5e75-4a14-b5ce-f318f8613b73","https://github.com/advisories/GHSA-r7hg-2cpp-8wqq"],"source_kind":"github","identifiers":["GHSA-r7hg-2cpp-8wqq","CVE-2022-4847"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.309Z","updated_at":"2026-10-12T14:13:59.145Z","epss_percentage":0.0066,"epss_percentile":0.50083,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yN2hnLTJjcHAtOHdxcc4AAwp_","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yN2hnLTJjcHAtOHdxcc4AAwp_","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yN2hnLTJjcHAtOHdxcc4AAwp_/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12aDQzLWNjNngtcHJwcs4AAwqF","url":"https://github.com/advisories/GHSA-vh43-cc6x-prpr","title":"usememos/memos vulnerable to Improper Verification of Source of a Communication Channel","description":"Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4848","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/25de88cc-8d0d-41a1-b069-9ef1327770bc","https://github.com/advisories/GHSA-vh43-cc6x-prpr"],"source_kind":"github","identifiers":["GHSA-vh43-cc6x-prpr","CVE-2022-4848"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.320Z","updated_at":"2026-10-12T14:13:59.146Z","epss_percentage":0.00544,"epss_percentile":0.43938,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aDQzLWNjNngtcHJwcs4AAwqF","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12aDQzLWNjNngtcHJwcs4AAwqF","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aDQzLWNjNngtcHJwcs4AAwqF/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1neHFmLTRnNHAtcTNoY84AAwqD","url":"https://github.com/advisories/GHSA-gxqf-4g4p-q3hc","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4839","https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8","https://huntr.dev/bounties/ad954cab-f026-4895-8003-99f5e3b507ed","https://github.com/advisories/GHSA-gxqf-4g4p-q3hc"],"source_kind":"github","identifiers":["GHSA-gxqf-4g4p-q3hc","CVE-2022-4839"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.221Z","updated_at":"2026-10-12T14:14:00.910Z","epss_percentage":0.00789,"epss_percentile":0.54908,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1neHFmLTRnNHAtcTNoY84AAwqD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1neHFmLTRnNHAtcTNoY84AAwqD","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1neHFmLTRnNHAtcTNoY84AAwqD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jd3JtLTMzcXEtNHcyeM4AAwp6","url":"https://github.com/advisories/GHSA-cwrm-33qq-4w2x","title":"usememos/memos Cross-Site Request Forgery vulnerability","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4846","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/38c685fc-7065-472d-a46e-e26bf0b556d3","https://github.com/advisories/GHSA-cwrm-33qq-4w2x"],"source_kind":"github","identifiers":["GHSA-cwrm-33qq-4w2x","CVE-2022-4846"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.285Z","updated_at":"2026-10-12T14:14:02.441Z","epss_percentage":0.00264,"epss_percentile":0.16812,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jd3JtLTMzcXEtNHcyeM4AAwp6","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jd3JtLTMzcXEtNHcyeM4AAwp6","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jd3JtLTMzcXEtNHcyeM4AAwp6/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02NDJxLTJxNjgtOWozcM4AAwp-","url":"https://github.com/advisories/GHSA-642q-2q68-9j3p","title":"usememos/memos Cross-Site Request Forgery vulnerability","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4849","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/404ce7dd-f345-4d98-ad80-c53ac74f4e5c","https://github.com/advisories/GHSA-642q-2q68-9j3p"],"source_kind":"github","identifiers":["GHSA-642q-2q68-9j3p","CVE-2022-4849"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.299Z","updated_at":"2026-10-15T07:14:03.042Z","epss_percentage":0.00356,"epss_percentile":0.27505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NDJxLTJxNjgtOWozcM4AAwp-","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02NDJxLTJxNjgtOWozcM4AAwp-","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NDJxLTJxNjgtOWozcM4AAwp-/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ybWh4LTloNWgtM3hoM84AAwqC","url":"https://github.com/advisories/GHSA-rmhx-9h5h-3xh3","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4841","https://github.com/usememos/memos/commit/64e5c343c5f74b0abdf3ac0d21a6139daea58cf8","https://huntr.dev/bounties/fa46b3ef-c621-443a-be3a-0a83fb78ba62","https://github.com/advisories/GHSA-rmhx-9h5h-3xh3"],"source_kind":"github","identifiers":["GHSA-rmhx-9h5h-3xh3","CVE-2022-4841"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.264Z","updated_at":"2026-10-12T14:14:00.912Z","epss_percentage":0.00619,"epss_percentile":0.48073,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybWh4LTloNWgtM3hoM84AAwqC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ybWh4LTloNWgtM3hoM84AAwqC","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybWh4LTloNWgtM3hoM84AAwqC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNWhxLTM1aDctcjl4NM4AAwqA","url":"https://github.com/advisories/GHSA-c5hq-35h7-r9x4","title":"usememos/memos Cross-Site Request Forgery vulnerability","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4850","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/46dc4728-eacc-43f5-9831-c203fdbcc346","https://github.com/advisories/GHSA-c5hq-35h7-r9x4"],"source_kind":"github","identifiers":["GHSA-c5hq-35h7-r9x4","CVE-2022-4850"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.331Z","updated_at":"2026-10-15T07:14:31.730Z","epss_percentage":0.00338,"epss_percentile":0.25502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNWhxLTM1aDctcjl4NM4AAwqA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNWhxLTM1aDctcjl4NM4AAwqA","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNWhxLTM1aDctcjl4NM4AAwqA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01anFwLXdtaGotZzMzZs4AAwqB","url":"https://github.com/advisories/GHSA-5jqp-wmhj-g33f","title":"usememos/memos Cross-Site Request Forgery vulnerability","description":"Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-29T18:30:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4844","https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948","https://huntr.dev/bounties/8e8df1f4-07ab-4b75-aec8-75b1229e93a3","https://github.com/advisories/GHSA-5jqp-wmhj-g33f"],"source_kind":"github","identifiers":["GHSA-5jqp-wmhj-g33f","CVE-2022-4844"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-07T06:03:05.406Z","updated_at":"2026-10-12T14:14:00.937Z","epss_percentage":0.00316,"epss_percentile":0.22604,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01anFwLXdtaGotZzMzZs4AAwqB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01anFwLXdtaGotZzMzZs4AAwqB","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01anFwLXdtaGotZzMzZs4AAwqB/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00MnEyLW01NGYtamg5Nc4AAwp8","url":"https://github.com/advisories/GHSA-42q2-m54f-jh95","title":"sememos/memos vulnerable to Improper Handling of Values","description":"In usememos/memos 0.9.0 and prior, an attacker can post malicious content to another user's memos page via POST request.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-29T18:30:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4851","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/e3cebc1a-1326-4a08-abad-0414a717fa0f","https://github.com/advisories/GHSA-42q2-m54f-jh95"],"source_kind":"github","identifiers":["GHSA-42q2-m54f-jh95","CVE-2022-4851"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-07T06:03:05.445Z","updated_at":"2026-10-12T14:13:59.125Z","epss_percentage":0.00794,"epss_percentile":0.55115,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00MnEyLW01NGYtamg5Nc4AAwp8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00MnEyLW01NGYtamg5Nc4AAwp8","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00MnEyLW01NGYtamg5Nc4AAwp8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oYzVxLTI2aDgtcjl3Zs4AAwo6","url":"https://github.com/advisories/GHSA-hc5q-26h8-r9wf","title":"usememos/memos Improper Authorization vulnerability","description":"In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4811","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/e907b754-4f33-46b6-9dd2-0d2223cb060c","https://github.com/advisories/GHSA-hc5q-26h8-r9wf"],"source_kind":"github","identifiers":["GHSA-hc5q-26h8-r9wf","CVE-2022-4811"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.399Z","updated_at":"2026-10-12T14:14:00.904Z","epss_percentage":0.0058,"epss_percentile":0.46001,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oYzVxLTI2aDgtcjl3Zs4AAwo6","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oYzVxLTI2aDgtcjl3Zs4AAwo6","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oYzVxLTI2aDgtcjl3Zs4AAwo6/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1nZmo0LXdnODktbTIycs4AAwo7","url":"https://github.com/advisories/GHSA-gfj4-wg89-m22r","title":"usememos/memos Improper Access Control vulnerability","description":"In usememos/memos 0.9.0 and prior, users can edit and delete all other users' shortcuts.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4807","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/704c9ed7-2120-47ea-aaf0-5fdcbd492954","https://github.com/advisories/GHSA-gfj4-wg89-m22r"],"source_kind":"github","identifiers":["GHSA-gfj4-wg89-m22r","CVE-2022-4807"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.433Z","updated_at":"2026-10-12T14:14:00.906Z","epss_percentage":0.00587,"epss_percentile":0.46522,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nZmo0LXdnODktbTIycs4AAwo7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1nZmo0LXdnODktbTIycs4AAwo7","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nZmo0LXdnODktbTIycs4AAwo7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wcDNwLTZqamgtcm1nN84AAwpC","url":"https://github.com/advisories/GHSA-pp3p-6jjh-rmg7","title":"usememos/memos Improper Access Control vulnerability","description":"An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others' public and private memos.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4806","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/2c7101bc-e6d8-4cd0-9003-bc8d86f4e4be","https://github.com/advisories/GHSA-pp3p-6jjh-rmg7"],"source_kind":"github","identifiers":["GHSA-pp3p-6jjh-rmg7","CVE-2022-4806"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.445Z","updated_at":"2026-10-12T14:14:00.906Z","epss_percentage":0.00778,"epss_percentile":0.54529,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcDNwLTZqamgtcm1nN84AAwpC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wcDNwLTZqamgtcm1nN84AAwpC","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcDNwLTZqamgtcm1nN84AAwpC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tcTVxLWdwZ3YtcHd4d84AAwpH","url":"https://github.com/advisories/GHSA-mq5q-gpgv-pwxw","title":"usememos/memos Incorrect Use of Privileged APIs vulnerability","description":"In usememos/memos 0.9.0 and prior, a user can archive any private memos, delete any shortcut, and edit any shortcut from other users via API.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4805","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/b03f6a9b-e49b-42d6-a318-1d7afd985873","https://github.com/advisories/GHSA-mq5q-gpgv-pwxw"],"source_kind":"github","identifiers":["GHSA-mq5q-gpgv-pwxw","CVE-2022-4805"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-07T06:03:05.465Z","updated_at":"2026-10-12T14:14:00.907Z","epss_percentage":0.00521,"epss_percentile":0.4252,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcTVxLWdwZ3YtcHd4d84AAwpH","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tcTVxLWdwZ3YtcHd4d84AAwpH","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcTVxLWdwZ3YtcHd4d84AAwpH/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yM3AzLTVmMzUtaDZtZs4AAwpF","url":"https://github.com/advisories/GHSA-r3p3-5f35-h6mf","title":"usememos/memos Improper Privilege Management vulnerability","description":"Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4808","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/11877cbf-fcaf-42ef-813e-502c7293f2b5","https://github.com/advisories/GHSA-r3p3-5f35-h6mf"],"source_kind":"github","identifiers":["GHSA-r3p3-5f35-h6mf","CVE-2022-4808"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-09T21:03:31.605Z","updated_at":"2026-10-12T14:14:00.929Z","epss_percentage":0.00433,"epss_percentile":0.3563,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yM3AzLTVmMzUtaDZtZs4AAwpF","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yM3AzLTVmMzUtaDZtZs4AAwpF","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c 0.9.1"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yM3AzLTVmMzUtaDZtZs4AAwpF/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tNXByLXdtNnEteDRnMs4AAwpL","url":"https://github.com/advisories/GHSA-m5pr-wm6q-x4g2","title":"usememos/memos vulnerable to Comparison of Object References Instead of Object Contents","description":"Comparison of Object References Instead of Object Contents in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4812","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/33924891-5c36-4b46-b417-98eaab688c4c","https://github.com/advisories/GHSA-m5pr-wm6q-x4g2"],"source_kind":"github","identifiers":["GHSA-m5pr-wm6q-x4g2","CVE-2022-4812"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.387Z","updated_at":"2026-10-12T14:14:00.903Z","epss_percentage":0.00594,"epss_percentile":0.46748,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNXByLXdtNnEteDRnMs4AAwpL","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tNXByLXdtNnEteDRnMs4AAwpL","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNXByLXdtNnEteDRnMs4AAwpL/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02dzV3LXd4OHctMmNxOc4AAwpK","url":"https://github.com/advisories/GHSA-6w5w-wx8w-2cq9","title":"usememos/memos Improper Access Control vulnerability","description":"usememos/memos 0.9.0 and prior is vulnerable to full account takeover via changing user name, email address, and display name.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4809","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/e46c5380-a590-40de-a8e5-79872ee0bb29","https://github.com/advisories/GHSA-6w5w-wx8w-2cq9"],"source_kind":"github","identifiers":["GHSA-6w5w-wx8w-2cq9","CVE-2022-4809"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.421Z","updated_at":"2026-10-12T14:14:00.905Z","epss_percentage":0.00938,"epss_percentile":0.59666,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02dzV3LXd4OHctMmNxOc4AAwpK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02dzV3LXd4OHctMmNxOc4AAwpK","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02dzV3LXd4OHctMmNxOc4AAwpK/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xZjlxLTN3d3gtOHFqds4AAwpE","url":"https://github.com/advisories/GHSA-qf9q-3wwx-8qjv","title":"usememos/memos Improper Access Control vulnerability","description":"In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4810","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/f0c8d778-db86-4ed3-85bb-5315ab56915e","https://github.com/advisories/GHSA-qf9q-3wwx-8qjv"],"source_kind":"github","identifiers":["GHSA-qf9q-3wwx-8qjv","CVE-2022-4810"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.410Z","updated_at":"2026-10-15T07:14:29.246Z","epss_percentage":0.00478,"epss_percentile":0.39535,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZjlxLTN3d3gtOHFqds4AAwpE","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xZjlxLTN3d3gtOHFqds4AAwpE","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZjlxLTN3d3gtOHFqds4AAwpE/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cXB3LTJqOW0tcnc4Y84AAwpJ","url":"https://github.com/advisories/GHSA-7qpw-2j9m-rw8c","title":"usememos/memos has Insufficient Granularity of Access Control","description":"An Insufficient Granularity of Access Control in usememos/memos prior to 0.9.0 can allow an attacker to delete a memo from the archives.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4813","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/a24b45d8-554b-4131-8ce1-f33bf8cdbacc","https://github.com/advisories/GHSA-7qpw-2j9m-rw8c"],"source_kind":"github","identifiers":["GHSA-7qpw-2j9m-rw8c","CVE-2022-4813"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.364Z","updated_at":"2026-10-15T07:14:29.244Z","epss_percentage":0.0055,"epss_percentile":0.44666,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cXB3LTJqOW0tcnc4Y84AAwpJ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cXB3LTJqOW0tcnc4Y84AAwpJ","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cXB3LTJqOW0tcnc4Y84AAwpJ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02Zng5LTI5eDItZm1mas4AAwpG","url":"https://github.com/advisories/GHSA-6fx9-29x2-fmfj","title":"usememos/memos Improper Access Control vulnerability","description":"Improper Access Control in GitHub repository usememos/memos 0.9.0 and prior.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4814","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/e65b3458-c2e2-4c0b-9029-e3c9ee015ae4","https://github.com/advisories/GHSA-6fx9-29x2-fmfj"],"source_kind":"github","identifiers":["GHSA-6fx9-29x2-fmfj","CVE-2022-4814"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T23:03:00.376Z","updated_at":"2026-10-15T07:14:29.245Z","epss_percentage":0.0055,"epss_percentile":0.44666,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02Zng5LTI5eDItZm1mas4AAwpG","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02Zng5LTI5eDItZm1mas4AAwpG","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02Zng5LTI5eDItZm1mas4AAwpG/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tZnZxLW0zamotODg2NM4AAwo8","url":"https://github.com/advisories/GHSA-mfvq-m3jj-8864","title":"usememos/memos vulnerable to Improper Verification of Source of a Communication Channel","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Verification of Source of a Communication Channel.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4800","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/aa45a6eb-cc38-45e5-a301-221ef43c0ef8","https://github.com/advisories/GHSA-mfvq-m3jj-8864"],"source_kind":"github","identifiers":["GHSA-mfvq-m3jj-8864","CVE-2022-4800"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.292Z","updated_at":"2026-10-15T07:14:29.248Z","epss_percentage":0.00603,"epss_percentile":0.47625,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZnZxLW0zamotODg2NM4AAwo8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tZnZxLW0zamotODg2NM4AAwo8","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZnZxLW0zamotODg2NM4AAwo8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xY2Y1LW0yYzYtODlmMs4AAwo_","url":"https://github.com/advisories/GHSA-qcf5-m2c6-89f2","title":"usememos/memos Improper Authorization vulnerability","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4798","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/e12eed25-1a8e-4ee1-b846-2d4df1db2fae","https://github.com/advisories/GHSA-qcf5-m2c6-89f2"],"source_kind":"github","identifiers":["GHSA-qcf5-m2c6-89f2","CVE-2022-4798"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.313Z","updated_at":"2026-10-12T14:13:59.147Z","epss_percentage":0.00722,"epss_percentile":0.52565,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xY2Y1LW0yYzYtODlmMs4AAwo_","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xY2Y1LW0yYzYtODlmMs4AAwo_","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xY2Y1LW0yYzYtODlmMs4AAwo_/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mODNwLXBnODYtcDkyMs4AAwpB","url":"https://github.com/advisories/GHSA-f83p-pg86-p922","title":"usememos/memos has Insufficient Granularity of Access Control","description":"usememos/memos 0.9.0 and prior allows an attacker to archive any user's public or private post.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4801","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/b0795261-0f97-4f0b-be44-9dc079e01593","https://github.com/advisories/GHSA-f83p-pg86-p922"],"source_kind":"github","identifiers":["GHSA-f83p-pg86-p922","CVE-2022-4801"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.279Z","updated_at":"2026-10-12T14:14:00.908Z","epss_percentage":0.00701,"epss_percentile":0.51751,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODNwLXBnODYtcDkyMs4AAwpB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mODNwLXBnODYtcDkyMs4AAwpB","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODNwLXBnODYtcDkyMs4AAwpB/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qdnE4LXc3cXYtaHFwNs4AAwo-","url":"https://github.com/advisories/GHSA-jvq8-w7qv-hqp6","title":"usememos/memos Improper Authentication vulnerability","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Authentication.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4799","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/c5d70f9d-b7a7-4418-9368-4566a8143e79","https://github.com/advisories/GHSA-jvq8-w7qv-hqp6"],"source_kind":"github","identifiers":["GHSA-jvq8-w7qv-hqp6","CVE-2022-4799"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.303Z","updated_at":"2026-10-12T14:13:59.147Z","epss_percentage":0.00784,"epss_percentile":0.54668,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qdnE4LXc3cXYtaHFwNs4AAwo-","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qdnE4LXc3cXYtaHFwNs4AAwo-","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qdnE4LXc3cXYtaHFwNs4AAwo-/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tZm1wLThtcWctcTR3bc4AAwpD","url":"https://github.com/advisories/GHSA-mfmp-8mqg-q4wm","title":"usememos/memos Improper Access Control vulnerability","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Access Control.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4803","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/0fba72b9-db10-4d9f-a707-2acf2004a286","https://github.com/advisories/GHSA-mfmp-8mqg-q4wm"],"source_kind":"github","identifiers":["GHSA-mfmp-8mqg-q4wm","CVE-2022-4803"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2023-01-07T06:03:06.051Z","updated_at":"2026-10-12T14:13:59.146Z","epss_percentage":0.00835,"epss_percentile":0.56513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZm1wLThtcWctcTR3bc4AAwpD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tZm1wLThtcWctcTR3bc4AAwpD","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tZm1wLThtcWctcTR3bc4AAwpD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xdzM2LXJ3NXEtZ3hjcc4AAwpI","url":"https://github.com/advisories/GHSA-qw36-rw5q-gxcq","title":"usememos/memos Improper Authorization vulnerability","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4804","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/4ee48a1e-6332-4d95-a360-9c392643c533","https://github.com/advisories/GHSA-qw36-rw5q-gxcq"],"source_kind":"github","identifiers":["GHSA-qw36-rw5q-gxcq","CVE-2022-4804"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.238Z","updated_at":"2026-10-12T14:13:59.146Z","epss_percentage":0.00607,"epss_percentile":0.47532,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzM2LXJ3NXEtZ3hjcc4AAwpI","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xdzM2LXJ3NXEtZ3hjcc4AAwpI","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xdzM2LXJ3NXEtZ3hjcc4AAwpI/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1naHgyLTZ2NGctOXdtbc4AAwo5","url":"https://github.com/advisories/GHSA-ghx2-6v4g-9wmm","title":"usememos/memos makes Incorrect Use of Privileged APIs","description":"In usememos/memos 0.9.0 and prior, a user with login permission can delete all notes of the whole application via `API DELETE https://demo.usememos.com/api/memo/$idnote`. The vulnerability will lose all user notes data throughout the system, causing damage to user data.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4796","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/efe8001b-1d6a-41af-a64c-736705cc66a6","https://github.com/advisories/GHSA-ghx2-6v4g-9wmm"],"source_kind":"github","identifiers":["GHSA-ghx2-6v4g-9wmm","CVE-2022-4796"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.334Z","updated_at":"2026-10-12T14:13:59.148Z","epss_percentage":0.00783,"epss_percentile":0.54645,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naHgyLTZ2NGctOXdtbc4AAwo5","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1naHgyLTZ2NGctOXdtbc4AAwo5","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naHgyLTZ2NGctOXdtbc4AAwo5/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xcnJmLXh2Y2YtcDY0cc4AAwo9","url":"https://github.com/advisories/GHSA-qrrf-xvcf-p64q","title":"usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts ","description":"In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4797","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/5233f76f-016b-4c65-b019-2c5d27802a1b","https://github.com/advisories/GHSA-qrrf-xvcf-p64q"],"source_kind":"github","identifiers":["GHSA-qrrf-xvcf-p64q","CVE-2022-4797"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.324Z","updated_at":"2026-10-12T14:13:59.148Z","epss_percentage":0.00733,"epss_percentile":0.52957,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcnJmLXh2Y2YtcDY0cc4AAwo9","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xcnJmLXh2Y2YtcDY0cc4AAwo9","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcnJmLXh2Y2YtcDY0cc4AAwo9/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yeDJtLXhyNHgtNTRoaM4AAwpA","url":"https://github.com/advisories/GHSA-rx2m-xr4x-54hh","title":"usememos/memos vulnerable to Improper Authorization","description":"usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-28T15:30:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4802","https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53","https://huntr.dev/bounties/d47d4a94-92e3-4400-b012-a8577cbd7956","https://github.com/advisories/GHSA-rx2m-xr4x-54hh"],"source_kind":"github","identifiers":["GHSA-rx2m-xr4x-54hh","CVE-2022-4802"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T20:03:01.269Z","updated_at":"2026-10-15T07:14:29.243Z","epss_percentage":0.00584,"epss_percentile":0.46631,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yeDJtLXhyNHgtNTRoaM4AAwpA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yeDJtLXhyNHgtNTRoaM4AAwpA","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yeDJtLXhyNHgtNTRoaM4AAwpA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12OTJwLXBobXAteGZmcs4AAwno","url":"https://github.com/advisories/GHSA-v92p-phmp-xffr","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-27T15:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4694","https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e","https://huntr.dev/bounties/a4d865c2-1a2b-4e3a-aaae-915b0dfc3f22","https://github.com/advisories/GHSA-v92p-phmp-xffr"],"source_kind":"github","identifiers":["GHSA-v92p-phmp-xffr","CVE-2022-4694"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T19:03:06.934Z","updated_at":"2026-10-08T08:01:06.104Z","epss_percentage":0.00555,"epss_percentile":0.44523,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTJwLXBobXAteGZmcs4AAwno","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12OTJwLXBobXAteGZmcs4AAwno","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTJwLXBobXAteGZmcs4AAwno/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jMnY0LThyOWctZzV4as4AAwnt","url":"https://github.com/advisories/GHSA-c2v4-8r9g-g5xj","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-27T15:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4695","https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e","https://huntr.dev/bounties/2559d548-b847-40fb-94d6-18c1ad58b789","https://github.com/advisories/GHSA-c2v4-8r9g-g5xj"],"source_kind":"github","identifiers":["GHSA-c2v4-8r9g-g5xj","CVE-2022-4695"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T19:03:06.951Z","updated_at":"2026-10-12T14:14:02.445Z","epss_percentage":0.00671,"epss_percentile":0.5053,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMnY0LThyOWctZzV4as4AAwnt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jMnY0LThyOWctZzV4as4AAwnt","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jMnY0LThyOWctZzV4as4AAwnt/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05N3JjLW1tNWotZjZyas4AAwnr","url":"https://github.com/advisories/GHSA-97rc-mm5j-f6rj","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-27T15:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4691","https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82","https://huntr.dev/bounties/459b55c1-22f5-4556-9cda-9b86aa91582f","https://github.com/advisories/GHSA-97rc-mm5j-f6rj"],"source_kind":"github","identifiers":["GHSA-97rc-mm5j-f6rj","CVE-2022-4691"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T19:03:06.924Z","updated_at":"2026-10-15T07:14:31.733Z","epss_percentage":0.00715,"epss_percentile":0.52505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05N3JjLW1tNWotZjZyas4AAwnr","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05N3JjLW1tNWotZjZyas4AAwnr","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05N3JjLW1tNWotZjZyas4AAwnr/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qNTkzLWg1djMtNDV4Ns4AAwny","url":"https://github.com/advisories/GHSA-j593-h5v3-45x6","title":"usememos/memos may leak user information to an authenticated user","description":"usememos/memos 0.9.0 and prior has endpoint that leaks user information like names, email, role, and OpenID to an authenticated user. A patch is available at commit 05b41804e33a34102f1f75bb2d69195dda6a1210 on the `main` branch.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-27T15:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4734","https://github.com/usememos/memos/commit/05b41804e33a34102f1f75bb2d69195dda6a1210","https://huntr.dev/bounties/4b4421dc-73af-4dec-884c-836f9732cb5b","https://github.com/advisories/GHSA-j593-h5v3-45x6"],"source_kind":"github","identifiers":["GHSA-j593-h5v3-45x6","CVE-2022-4734"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T18:03:21.867Z","updated_at":"2026-10-08T08:01:04.377Z","epss_percentage":0.00795,"epss_percentile":0.54928,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNTkzLWg1djMtNDV4Ns4AAwny","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qNTkzLWg1djMtNDV4Ns4AAwny","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNTkzLWg1djMtNDV4Ns4AAwny/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zM204LWY0aHctd20zcc4AAwne","url":"https://github.com/advisories/GHSA-33m8-f4hw-wm3q","title":"usememos/memos Denial of Service vulnerability","description":"Denial of Service in GitHub repository usememos/memos 0.9.0 and prior. A patch is available on the `main` branch at commit number f888c628408501daf639de07b90a72ab443b0f4c.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-27T15:30:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4767","https://github.com/usememos/memos/commit/f888c628408501daf639de07b90a72ab443b0f4c","https://huntr.dev/bounties/75b4a085-923c-4ecc-bbf6-e049290db502","https://github.com/advisories/GHSA-33m8-f4hw-wm3q"],"source_kind":"github","identifiers":["GHSA-33m8-f4hw-wm3q","CVE-2022-4767"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T18:03:21.878Z","updated_at":"2026-10-08T08:01:04.406Z","epss_percentage":0.00697,"epss_percentile":0.51558,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zM204LWY0aHctd20zcc4AAwne","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zM204LWY0aHctd20zcc4AAwne","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.1","vulnerable_version_range":"\u003c= 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zM204LWY0aHctd20zcc4AAwne/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mNTUyLTk3cXgtYzY5NM4AAwk8","url":"https://github.com/advisories/GHSA-f552-97qx-c694","title":"usememos/memos vulnerable to stored Cross-site Scripting","description":"Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-23T21:30:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4692","https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82","https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74","https://github.com/advisories/GHSA-f552-97qx-c694"],"source_kind":"github","identifiers":["GHSA-f552-97qx-c694","CVE-2022-4692"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T17:09:53.364Z","updated_at":"2026-10-05T15:14:35.316Z","epss_percentage":0.0058,"epss_percentile":0.45789,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNTUyLTk3cXgtYzY5NM4AAwk8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mNTUyLTk3cXgtYzY5NM4AAwk8","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNTUyLTk3cXgtYzY5NM4AAwk8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xY3cyLTQ5MnYtNTd4as4AAwkV","url":"https://github.com/advisories/GHSA-qcw2-492v-57xj","title":"usememos/memos missing Secure cookie attribute","description":"usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 is missing the Secure cookie attribute, making it vulnerable to session hijacking.\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4683","https://github.com/usememos/memos/commit/7efa749c6628c75b19a912ca170529f5c293bb2e","https://huntr.dev/bounties/84973f6b-739a-4d7e-8757-fc58cbbaf6ef","https://github.com/advisories/GHSA-qcw2-492v-57xj"],"source_kind":"github","identifiers":["GHSA-qcw2-492v-57xj","CVE-2022-4683"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-27T02:51:22.254Z","updated_at":"2026-10-08T08:01:08.020Z","epss_percentage":0.00387,"epss_percentile":0.3052,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xY3cyLTQ5MnYtNTd4as4AAwkV","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xY3cyLTQ5MnYtNTd4as4AAwkV","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xY3cyLTQ5MnYtNTd4as4AAwkV/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mdjZjLXJmZzMtZ3Zqd84AAwkU","url":"https://github.com/advisories/GHSA-fv6c-rfg3-gvjw","title":"usememos/memos makes Incorrect Use of Privileged APIs","description":"Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4687","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/b908377f-a61b-432c-8e6a-c7498da69788","https://github.com/advisories/GHSA-fv6c-rfg3-gvjw"],"source_kind":"github","identifiers":["GHSA-fv6c-rfg3-gvjw","CVE-2022-4687"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T17:09:53.472Z","updated_at":"2026-10-08T08:01:06.112Z","epss_percentage":0.00651,"epss_percentile":0.49534,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mdjZjLXJmZzMtZ3Zqd84AAwkU","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mdjZjLXJmZzMtZ3Zqd84AAwkU","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mdjZjLXJmZzMtZ3Zqd84AAwkU/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05djQ4LTJoNXgtZnZwbc4AAwkS","url":"https://github.com/advisories/GHSA-9v48-2h5x-fvpm","title":"usememos/memos vulnerable to improper access control","description":"Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4685","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/015dbf52-8924-4aad-86d7-892cb61157af","https://github.com/advisories/GHSA-9v48-2h5x-fvpm"],"source_kind":"github","identifiers":["GHSA-9v48-2h5x-fvpm","CVE-2022-4685"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-29T02:03:03.198Z","updated_at":"2026-09-30T09:15:57.184Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05djQ4LTJoNXgtZnZwbc4AAwkS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05djQ4LTJoNXgtZnZwbc4AAwkS","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05djQ4LTJoNXgtZnZwbc4AAwkS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12d2c0LTg0NngtZjk0ds4AAwkW","url":"https://github.com/advisories/GHSA-vwg4-846x-f94v","title":"usememos/memos vulnerable to improper authorization","description":"usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos versions prior to 0.9.0 are vulnerable to improper authorization, which can allow a user to modify the nickname, username and email of other users without permission.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4688","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/23856e7e-94ff-4dee-97d0-0cd47e9b8ff6","https://github.com/advisories/GHSA-vwg4-846x-f94v"],"source_kind":"github","identifiers":["GHSA-vwg4-846x-f94v","CVE-2022-4688"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-27T02:51:22.618Z","updated_at":"2026-10-05T15:14:37.091Z","epss_percentage":0.00763,"epss_percentile":0.53815,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12d2c0LTg0NngtZjk0ds4AAwkW","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12d2c0LTg0NngtZjk0ds4AAwkW","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12d2c0LTg0NngtZjk0ds4AAwkW/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jOGpoLXZjamgtZngyd84AAwkR","url":"https://github.com/advisories/GHSA-c8jh-vcjh-fx2w","title":"usememos/memos vulnerable to stored cross-site scripting (XSS)","description":"usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos prior to 0.9.0 has a feature to upload file and display it, and by uploading a crafted SVG file, an attacker could perform a stored cross-site scripting attack with the image direct link. This was patched in version 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4690","https://huntr.dev/bounties/7e1be91d-3b13-4300-8af2-9bd9665ec335","https://github.com/usememos/memos/pull/833","https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e","https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82","https://github.com/advisories/GHSA-c8jh-vcjh-fx2w"],"source_kind":"github","identifiers":["GHSA-c8jh-vcjh-fx2w","CVE-2022-4690"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-27T02:51:23.306Z","updated_at":"2026-10-05T15:14:37.092Z","epss_percentage":0.00618,"epss_percentile":0.47804,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jOGpoLXZjamgtZngyd84AAwkR","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jOGpoLXZjamgtZngyd84AAwkR","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jOGpoLXZjamgtZngyd84AAwkR/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02OGd3LXIyeDUtN3I1cs4AAwkY","url":"https://github.com/advisories/GHSA-68gw-r2x5-7r5r","title":"usememos/memos Authorization Bypass Through User-Controlled Key vulnerability","description":"Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4686","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/caa0b22c-501f-44eb-af65-65c315cd1637","https://github.com/advisories/GHSA-68gw-r2x5-7r5r"],"source_kind":"github","identifiers":["GHSA-68gw-r2x5-7r5r","CVE-2022-4686"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T17:09:53.427Z","updated_at":"2026-10-08T08:01:06.111Z","epss_percentage":0.00752,"epss_percentile":0.53523,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OGd3LXIyeDUtN3I1cs4AAwkY","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02OGd3LXIyeDUtN3I1cs4AAwkY","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02OGd3LXIyeDUtN3I1cs4AAwkY/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13NTd2LTZ4cDQtcm0yds4AAwkT","url":"https://github.com/advisories/GHSA-w57v-6xp4-rm2v","title":"usememos/memos vulnerable to account takeover due to improper access control","description":"usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Versions prior to 0.9.0 improperly maintain access control allowing an attacker to take over an account by changing header values in the HTTP request.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4689","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/a78c4326-6e7b-47fe-aa82-461e5c12a4e3","https://github.com/usememos/memos/pull/831","https://github.com/advisories/GHSA-w57v-6xp4-rm2v"],"source_kind":"github","identifiers":["GHSA-w57v-6xp4-rm2v","CVE-2022-4689"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-27T02:51:23.028Z","updated_at":"2026-10-05T15:14:37.091Z","epss_percentage":0.00763,"epss_percentile":0.53815,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13NTd2LTZ4cDQtcm0yds4AAwkT","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13NTd2LTZ4cDQtcm0yds4AAwkT","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13NTd2LTZ4cDQtcm0yds4AAwkT/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xcjUyLTU5cjYtNDlmNM4AAwkX","url":"https://github.com/advisories/GHSA-qr52-59r6-49f4","title":"usememos/memos Improper Access Control vulnerability","description":"Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-12-23T12:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4684","https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9","https://huntr.dev/bounties/b66f2bdd-8b41-456c-bf65-92302c2e03b5","https://github.com/advisories/GHSA-qr52-59r6-49f4"],"source_kind":"github","identifiers":["GHSA-qr52-59r6-49f4","CVE-2022-4684"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-30T17:09:53.416Z","updated_at":"2026-10-15T07:14:33.109Z","epss_percentage":0.00625,"epss_percentile":0.48558,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcjUyLTU5cjYtNDlmNM4AAwkX","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xcjUyLTU5cjYtNDlmNM4AAwkX","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":"0.9.0","vulnerable_version_range":"\u003c 0.9.0"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcjUyLTU5cjYtNDlmNM4AAwkX/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yZ2o1LWpqNXEtdjN2N84AAwZz","url":"https://github.com/advisories/GHSA-rgj5-jj5q-v3v7","title":"Memos Cross-site Scripting vulnerability","description":"Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting (XSS) in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-12-19T12:30:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-4609","https://github.com/usememos/memos/commit/726285e63467820f94cbf872abe71025a161c212","https://huntr.dev/bounties/5b3115c5-776c-43d3-a7be-c8dc13ab81ce","https://github.com/advisories/GHSA-rgj5-jj5q-v3v7"],"source_kind":"github","identifiers":["GHSA-rgj5-jj5q-v3v7","CVE-2022-4609"],"repository_url":"https://github.com/usememos/memos","blast_radius":1.0,"created_at":"2022-12-21T16:11:43.831Z","updated_at":"2026-10-08T08:01:09.429Z","epss_percentage":0.00724,"epss_percentile":0.5251,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZ2o1LWpqNXEtdjN2N84AAwZz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yZ2o1LWpqNXEtdjN2N84AAwZz","packages":[{"ecosystem":"go","package_name":"github.com/usememos/memos","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.8.3"}],"purl":"pkg:go/github.com%2Fusememos%2Fmemos"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZ2o1LWpqNXEtdjN2N84AAwZz/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/usememos/memos","docker_dependents_count":14,"docker_downloads_count":981,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/usememos/memos","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/usememos/memos/dependencies","status":null,"funding_links":["https://github.com/sponsors/usememos"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-04T16:00:32.062Z","issues_count":2004,"pull_requests_count":1917,"avg_time_to_close_issue":3623810.025625381,"avg_time_to_close_pull_request":568101.8013048635,"issues_closed_count":1639,"pull_requests_closed_count":1686,"pull_request_authors_count":353,"issue_authors_count":1317,"avg_comments_per_issue":2.0154690618762476,"avg_comments_per_pull_request":0.6765779864371414,"merged_pull_requests_count":1372,"bot_issues_count":1,"bot_pull_requests_count":505,"past_year_issues_count":101,"past_year_pull_requests_count":124,"past_year_avg_time_to_close_issue":832556.0217391305,"past_year_avg_time_to_close_pull_request":223113.25352112675,"past_year_issues_closed_count":46,"past_year_pull_requests_closed_count":71,"past_year_pull_request_authors_count":59,"past_year_issue_authors_count":74,"past_year_avg_comments_per_issue":1.00990099009901,"past_year_avg_comments_per_pull_request":1.9112903225806452,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":57,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/usememos%2Fmemos/issues","maintainers":[{"login":"boojack","count":135,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/boojack"},{"login":"athurg","count":111,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/athurg"},{"login":"michaelien","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/michaelien"},{"login":"Zeng1998","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Zeng1998"},{"login":"bluedbird","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bluedbird"},{"login":"johnnyjoygh","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/johnnyjoygh"},{"login":"CorrectRoadH","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/CorrectRoadH"},{"login":"hyoban","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hyoban"},{"login":"amblued","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amblued"},{"login":"maliming","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/maliming"}],"active_maintainers":[{"login":"bluedbird","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bluedbird"},{"login":"boojack","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/boojack"},{"login":"amblued","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amblued"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fusememos%2Fmemos/codemeta","maintainers":[]}