GHSA-h2ph-9r76-37v5

GitHub Security Advisory

usememos/memos vulnerable to stored Cross-site Scripting

✓ GitHub Reviewed MODERATE Has CVE

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.10.0.

Go github.com/usememos/memos

Affected versions: 0 (fixed in 0.10.0)

CVE-2023-0111

GHSA ID

GHSA-h2ph-9r76-37v5

Published

January 7, 2023 6:30 AM

Last Modified

January 12, 2023 4:47 PM

CVSS Score

5.0 /10

Primary Ecosystem

Primary Package

github.com/usememos/memos

GitHub Reviewed

✓ Yes

Last updated: September 11, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.