Skip to content
OpenAdvisories
High · 8.3 CVE-2022-4811 EUVD-2022-7646GHSA-hc5q-26h8-r9wfGO-2022-1259

Authorization Bypass Through User-Controlled Key in usememos/memos

Published Dec 28, 2022 · Updated Apr 10, 2025 · Assigned by @huntrdev

Vendor: usememos Product: usememos/memos Package: github.com/usememos/memos Ecosystem: Go

Description

Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.

Affected products

VendorProductAffectedFixed
usememos usememos/memos unspecified – < 0.9.1 0.9.1

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/usememos/memos < 0.9.1 0.9.1 GHSA-hc5q-26h8-r9wf

References