| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/usememos/memos | < 0.16.1 | 0.16.1 |
| memos | ≥ 0.13.2, < 0.16.1 | 0.16.1 |
memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an SSRF vulnerability exists at the /o/get/httpmeta that allows unauthenticated users to enumerate the internal network and receive limited html values in json form. This vulnerability is fixed in 0.16.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free