# Usememos Memos


- [CVE-2025-50738](https://insights.sbomify.com/CVE-2025-50738/): Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs (critical 9.8)
- [CVE-2025-22952](https://insights.sbomify.com/CVE-2025-22952/): Memos Server-Side Request Forgery (SSRF) (critical 9.8)
- [CVE-2023-0109](https://insights.sbomify.com/CVE-2023-0109/): Stored XSS in usememos/memos (critical 9.8)
- [CVE-2023-4696](https://insights.sbomify.com/CVE-2023-4696/): Improper Access Control in usememos/memos (critical 9.8)
- [CVE-2022-4866](https://insights.sbomify.com/CVE-2022-4866/): Cross-site Scripting (XSS) - Stored in usememos/memos (critical 9.8)
- [CVE-2022-4851](https://insights.sbomify.com/CVE-2022-4851/): Improper Handling of Values in usememos/memos (critical 9.8)
- [CVE-2022-4797](https://insights.sbomify.com/CVE-2022-4797/): Improper Restriction of Excessive Authentication Attempts in usememos/memos (critical 9.8)
- [CVE-2022-4802](https://insights.sbomify.com/CVE-2022-4802/): Authorization Bypass Through User-Controlled Key in usememos/memos (critical 9.1)
- [CVE-2023-0106](https://insights.sbomify.com/CVE-2023-0106/): Cross-site Scripting (XSS) - Stored in usememos/memos (critical 9.0)
- [CVE-2023-4697](https://insights.sbomify.com/CVE-2023-4697/): Improper Privilege Management in usememos/memos (high 8.8)
- [CVE-2022-4688](https://insights.sbomify.com/CVE-2022-4688/): Improper Authorization in usememos/memos (high 8.8)
- [CVE-2022-4841](https://insights.sbomify.com/CVE-2022-4841/): Cross-site Scripting (XSS) - Stored in usememos/memos (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/products/usememos/memos/