Go/github.com/usememos/memos CVE-2022-4686: critical 9.8, EPSS 0.78%
usememos/memos Authorization Bypass Through User-Controlled Key vulnerability
Action: Upgrade github.com/usememos/memos to 0.9.0 or later.
go get github.com/usememos/memos@v0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: GHSA-68gw-r2x5-7r5r
- https://nvd.nist.gov/vuln/detail/CVE-2022-4686
- https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9
- https://github.com/usememos/memos
- https://huntr.dev/bounties/caa0b22c-501f-44eb-af65-65c315cd1637
CVE-2022-4686 · published · modified · JSON