| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/usememos/memos | < 0.9.1 | 0.9.1 |
| memos | < 0.9.1 | 0.9.1 |
usememos/memos 0.9.0 and prior has endpoint that leaks user information like names, email, role, and OpenID to an authenticated user. A patch is available at commit 05b41804e33a34102f1f75bb2d69195dda6a1210 on the main branch.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free