https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:31:26.389259+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251966 EUVD-2026-251966 2026-10-02T14:31:26.391713+00:00 EUVD-2026-251966 https://cve.radiocsirt.org/vuln/fkie_cve-2025-56761 fkie_cve-2025-56761 2026-10-02T14:31:26.391744+00:00

Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features. Memos does not verify the content type of the uploaded data and serve it back as is. An authenticated attacker can use this to elevate their privileges when the stored XSS is viewed by an admin.

 https://cve.radiocsirt.org/vuln/ghsa-cgrg-86m5-xm4w GHSA-cgrg-86m5-xm4w — Memos Vulnerable to Stored Cross-Site Scripting 2026-10-02T14:31:26.391775+00:00

Affected: Go: github.com/usememos/memos

Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar features. Memos does not verify the content type of the uploaded data and serve it back as is. An authenticated attacker can use this to elevate their privileges when the stored XSS is viewed by an admin.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15538-1 openSUSE-SU-2025:15538-1 — govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media 2026-10-02T14:31:26.391799+00:00

govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media