{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.24.0"}],"component":"github.com/usememos/memos","cve_ids":["CVE-2025-22952"],"ecosystem":"Go","epss":0.02932,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wfxg-v3j4-7qmj","id":"tcs_01M5KFQP2ZBHV7M4MP9D56P9GA","modified_at":"2025-03-03T19:42:03.451464Z","published_at":"2025-02-27T21:32:17Z","references":["https://osv.dev/vulnerability/GHSA-wfxg-v3j4-7qmj","https://nvd.nist.gov/vuln/detail/CVE-2025-22952","https://github.com/usememos/memos/issues/4413","https://github.com/usememos/memos/pull/4421","https://github.com/usememos/memos/pull/4428","https://github.com/usememos/memos/commit/f17774cb3b9612495d89576a91ab3480018cb0b6","https://github.com/usememos/memos/commit/f8c973c938742827baaf6665cfe66805dc8e8d02","https://elest.io/open-source/memos","https://github.com/usememos/memos"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wfxg-v3j4-7qmj","url":"https://osv.dev/vulnerability/GHSA-wfxg-v3j4-7qmj"},{"source":"nvd","source_id":"CVE-2025-22952","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22952"}],"summary":"Memos Server-Side Request Forgery (SSRF)"}