| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/usememos/memos | < 0.9.1 | 0.9.1 |
| memos | < 0.9.1 | 0.9.1 |
In usememos/memos 0.9.0 and prior, a user with login permission can delete all notes of the whole application via API DELETE https://demo.usememos.com/api/memo/$idnote. The vulnerability will lose all user notes data throughout the system, causing damage to user data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free