Advisories · Technology
memos.
Every CVE that names memos among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Memos before 0.27.0 Missing Authorization via ActivityService ListActivities/GetActivity
- memos
- Broken access control
- CVSS 8.6 High
Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change
- memos
- Authentication bypass
- CVSS 6.9 Medium
Memos through 0.30.0 SSRF via Omitted CGNAT Address Range
- memos
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext()
- memos
- Race condition
- CVSS 8.5 High
Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass
- memos
- Server-side request forgery (SSRF)