| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/usememos/memos | ≤ 0.22.0all versions | |
| memos | = 0.22.0 |
When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbitrary file write on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free