Usememos Memos vulnerabilities, page 4
78 vulnerabilities
Known vulnerabilities in Usememos Memos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-29028github.com/usememosmemos+1
EPSS score1.05%
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1.CVE-2024-29029github.com/usememosmemos+1EPSS score1.08%
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/image that allows unauthenticated users to enumerate the internal network and retrieve images. The response from the image request is then copied into the response of the current server request, causing a reflected XSS vulnerability. Version 0.22.0 of memos removes the vulnerable file.CVE-2026-84203usememosmemosEPSS score0.45%
Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely, bypassing the password change security measure.CVE-2026-71272usememosmemosEPSS score0.26%
Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPort(host, port) using the original hostname rather than the already-validated IP address.CVE-2026-71271usememosmemosEPSS score0.33%
Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified — unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/html_meta.go, which does.CVE-2026-6634github.com/usememosmemos+1EPSS score0.35%
A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.CVE-2026-82476usememosmemosEPSS score0.43%
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata fetcher, allowing unauthenticated attackers to bypass IP validation. Attackers can make the server request internal hosts in that range including cloud metadata services and read page titles and descriptions back.CVE-2023-0109github.com/usememosmemos+2EPSS score0.44%
A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.CVE-2023-0112github.com/usememosmemos+2EPSS score0.59%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0106github.com/usememosmemos+2EPSS score0.66%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0110github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0108github.com/usememosmemos+2EPSS score0.53%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0107github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-0111github.com/usememosmemos+2EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.CVE-2023-4698github.com/usememosmemos+2EPSS score0.92%
Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-4696github.com/usememosmemos+2EPSS score1.12%
Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-4697github.com/usememosmemos+2EPSS score0.85%
Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.CVE-2023-5036github.com/usememosmemos+2EPSS score0.32%
Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.