Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65797
6.5
MEDIUMCVSS v3
Published
December 8, 2025
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service (DoS).
usememos/memos
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.= 0.25.2NVD
neosmemo/memos
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.= 0.25.2NVD
NPM