GO-2025-3492
Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
At a glance
- Published
- Updated
- CVE
- CVE-2025-22952
- Aliases
- GHSA-wfxg-v3j4-7qmj
Description
Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/usememos/memos | introduced 0 |
References
- https://github.com/advisories/GHSA-wfxg-v3j4-7qmj ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-22952 ADVISORY
- https://github.com/usememos/memos/commit/f17774cb3b9612495d89576a91ab3480018cb0b6 FIX
- https://github.com/usememos/memos/commit/f8c973c938742827baaf6665cfe66805dc8e8d02 FIX
- https://github.com/usememos/memos/pull/4421 FIX
- https://github.com/usememos/memos/pull/4428 FIX
- https://github.com/usememos/memos/issues/4413 REPORT
- https://elest.io/open-source/memos WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |