usememos memos

• CVE-2026-113601 Medium 4.3 Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity 0.3%
• CVE-2026-84203 High 8.1 Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change 0.4%
• CVE-2026-82476 Medium 5.3 Memos through 0.30.0 SSRF via Omitted CGNAT Address Range 0.4%
• CVE-2026-71272 High 8.5 Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext() 0.3%
• CVE-2026-71271 High 8.5 Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass 0.3%
• CVE-2026-6634 Medium 6.3 usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization 0.3%
• CVE-2024-21635 High 7.1 Memos Access Tokens Stay Valid after User Password Change 0.3%
• CVE-2024-41659 High 8.1 GHSL-2024-034: memos CORS Misconfiguration in server.go 0.6%
• CVE-2024-29029 Medium 6.1 memos vulnerable to an SSRF in /o/get/image 1.1%
• CVE-2024-29028 Medium 5.8 memos vulnerable to an SSRF in /o/get/httpmeta 1.0%
• CVE-2024-29030 Medium 5.8 memos vulnerable to an SSRF in /api/resource 1.1%