~ / search / GHSA-cwrm-33qq-4w2x

GHSA-cwrm-33qq-4w2x

usememos/memos Cross-Site Request Forgery vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-4846

Packages

EcosystemPackageAffectedFixed in
Go github.com/usememos/memos <= 0.9.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos 0.9.0 and prior.

References

External links from the advisory. They lead to third-party sites.