Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-29030
5.8
MEDIUMCVSS v3
Published
April 19, 2024
Affected
3 projects
Assigned by
GitHub
Severity scale
010
Description
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /api/resource that allows authenticated users to enumerate the internal network. Version 0.22.0 of memos removes the vulnerable file.
usememos/memos
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.>= 0.13.2, < 0.22.0NVD
neosmemo/memos
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.>= 0.13.2, < 0.22.0NVD
NPM