Uusememos

Products

Exploited and recent CVEs

• CVE-2026-113601 Medium 4.3 Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity 0.3%
• CVE-2026-84203 High 8.1 Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change 0.4%
• CVE-2026-82476 Medium 5.3 Memos through 0.30.0 SSRF via Omitted CGNAT Address Range 0.4%
• CVE-2026-71272 High 8.5 Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext() 0.3%
• CVE-2026-71271 High 8.5 Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass 0.3%
• CVE-2026-6634 Medium 6.3 usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization 0.3%
• CVE-2024-21635 High 7.1 Memos Access Tokens Stay Valid after User Password Change 0.3%
• CVE-2023-0109 Critical 9.8 Stored XSS in usememos/memos 0.5%
• CVE-2024-41659 High 8.1 GHSL-2024-034: memos CORS Misconfiguration in server.go 0.6%
• CVE-2024-29029 Medium 6.1 memos vulnerable to an SSRF in /o/get/image 1.1%
• CVE-2024-29028 Medium 5.8 memos vulnerable to an SSRF in /o/get/httpmeta 1.0%
• CVE-2024-29030 Medium 5.8 memos vulnerable to an SSRF in /api/resource 1.1%
• CVE-2023-5036 High 7.3 Cross-Site Request Forgery (CSRF) in usememos/memos 0.3%
• CVE-2023-4697 High 8.8 Improper Privilege Management in usememos/memos 0.8%
• CVE-2023-4698 High 7.5 Improper Input Validation in usememos/memos 0.9%
• CVE-2023-4696 Critical 9.8 Improper Access Control in usememos/memos 1.1%
• CVE-2023-0107 Medium 6.5 Cross-site Scripting (XSS) - Stored in usememos/memos 0.5%
• CVE-2023-0111 Medium 5.4 Cross-site Scripting (XSS) - Stored in usememos/memos 0.5%
• CVE-2023-0110 High 7.1 Cross-site Scripting (XSS) - Stored in usememos/memos 0.5%
• CVE-2023-0106 Critical 9.0 Cross-site Scripting (XSS) - Stored in usememos/memos 0.7%
• CVE-2023-0108 High 7.1 Cross-site Scripting (XSS) - Stored in usememos/memos 0.5%
• CVE-2023-0112 High 7.6 Cross-site Scripting (XSS) - Stored in usememos/memos 0.6%
• CVE-2022-4866 Critical 9.8 Cross-site Scripting (XSS) - Stored in usememos/memos 1.1%
• CVE-2022-4865 High 8.3 Cross-site Scripting (XSS) - Stored in usememos/memos 1.1%
• CVE-2022-4863 High 8.4 Improper Handling of Insufficient Permissions or Privileges in usememos/memos 0.7%
• CVE-2022-4850 Medium 6.5 Cross-Site Request Forgery (CSRF) in usememos/memos 0.4%
• CVE-2022-4845 Medium 6.7 Cross-Site Request Forgery (CSRF) in usememos/memos 0.3%
• CVE-2022-4840 High 7.6 Cross-site Scripting (XSS) - Stored in usememos/memos 0.7%
• CVE-2022-4841 High 8.6 Cross-site Scripting (XSS) - Stored in usememos/memos 0.6%
• CVE-2022-4846 Medium 6.3 Cross-Site Request Forgery (CSRF) in usememos/memos 0.3%