Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-22952
9.8
CRITICALCVSS v3
Published
February 27, 2025
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.
usememos/memos
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.= 0.23.0NVD
neosmemo/memos
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.= 0.23.0NVD
NPM