https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T22:02:40.957594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223308 EUVD-2026-223308 2026-10-27T22:02:40.960462+00:00 EUVD-2026-223308 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25978 fkie_cve-2022-25978 2026-10-27T22:02:40.960493+00:00

All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

 https://cve.radiocsirt.org/vuln/ghsa-9w8x-5hv5-r6gw GHSA-9w8x-5hv5-r6gw — Cross Site Scripting in usememos/memos 2026-10-27T22:02:40.960522+00:00

Affected: Go: github.com/usememos/memos

All versions of the package github.com/usememos/memos/server prior to 0.11.0 are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, which allows malicious actors to introduce links starting with a javascript: scheme.

 https://cve.radiocsirt.org/vuln/gsd-2022-25978 gsd-2022-25978 2026-10-27T22:02:40.960546+00:00 gsd-2022-25978