GHSA-8w5q-5fpq-v4pm

GitHub Security Advisory

usememos/memos Cross-site Scripting vulnerability

✓ GitHub Reviewed CRITICAL Has CVE

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Go github.com/usememos/memos

Affected versions: 0 (fixed in 0.9.1)

CVE-2022-4865

GHSA ID

GHSA-8w5q-5fpq-v4pm

Published

December 31, 2022 9:30 AM

Last Modified

January 10, 2023 4:02 PM

CVSS Score

9.0 /10

Primary Ecosystem

Primary Package

github.com/usememos/memos

GitHub Reviewed

✓ Yes

Last updated: September 13, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.