GHSA-pp3p-6jjh-rmg7

GitHub Security Advisory

usememos/memos Improper Access Control vulnerability

✓ GitHub Reviewed MODERATE Has CVE

An Improper Access Control vulnerability in usememos/memos 0.9.0 and prior can result in a user deleting others' public and private memos.

Go github.com/usememos/memos

Affected versions: 0 (fixed in 0.9.1)

CVE-2022-4806

GHSA ID

GHSA-pp3p-6jjh-rmg7

Published

December 28, 2022 3:30 PM

Last Modified

January 10, 2023 3:42 PM

CVSS Score

5.0 /10

Primary Ecosystem

Primary Package

github.com/usememos/memos

GitHub Reviewed

✓ Yes

Last updated: September 12, 2025 6:34 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.