{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/usememos/memos","cve_ids":["CVE-2025-22952"],"ecosystem":"Go","epss":0.02932,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wfxg-v3j4-7qmj","id":"tcs_01M5KG790X6EK5EYFJRB7S90C6","modified_at":"2026-03-03T04:57:13.371776Z","published_at":"2025-03-03T19:22:09Z","references":["https://osv.dev/vulnerability/GO-2025-3492","https://github.com/advisories/GHSA-wfxg-v3j4-7qmj","https://nvd.nist.gov/vuln/detail/CVE-2025-22952","https://github.com/usememos/memos/commit/f17774cb3b9612495d89576a91ab3480018cb0b6","https://github.com/usememos/memos/commit/f8c973c938742827baaf6665cfe66805dc8e8d02","https://github.com/usememos/memos/pull/4421","https://github.com/usememos/memos/pull/4428","https://github.com/usememos/memos/issues/4413","https://elest.io/open-source/memos"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GO-2025-3492","url":"https://osv.dev/vulnerability/GO-2025-3492"},{"source":"nvd","source_id":"CVE-2025-22952","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22952"}],"summary":"Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos"}