Go/github.com/usememos/memos CVE-2025-50738: medium, EPSS 2.38%
Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs
Action: Upgrade github.com/usememos/memos to 0.24.4 or later.
go get github.com/usememos/memos@v0.24.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.24.4 | - |
Fixed versions
| 0.24.4 |
Sources
- osv: GHSA-hfcf-79gh-f3jc
- https://nvd.nist.gov/vuln/detail/CVE-2025-50738
- https://github.com/usememos/memos/issues/4707#issuecomment-2898504237
- https://github.com/usememos/memos/commit/46d5307d7f210067b46e07400a728fa9095803d9
- https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738
- https://github.com/usememos/memos
CVE-2025-50738 · published · modified · JSON