Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65799
4.3
MEDIUMCVSS v3
Published
December 8, 2025
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.
usememos/memos
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.
GitHubOpen-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.= 0.25.2NVD
neosmemo/memos
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.
Docker HubA privacy-first, lightweight note-taking service. Easily capture and share your great thoughts.= 0.25.2NVD
NPM