{"schema_version":"1.7.3","id":"GO-2025-3831","published":"2025-08-11T17:24:51Z","modified":"2026-03-03T04:57:22.791377Z","aliases":["CVE-2025-50738","GHSA-hfcf-79gh-f3jc"],"summary":"Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos","details":"Memos has Cross-Site Scripting (XSS) Vulnerability in Image URLs in github.com/usememos/memos","affected":[{"package":{"name":"github.com/usememos/memos","ecosystem":"Go","purl":"pkg:golang/github.com/usememos/memos"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.24.4"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2025-3831.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-hfcf-79gh-f3jc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-50738"},{"type":"FIX","url":"https://github.com/usememos/memos/commit/46d5307d7f210067b46e07400a728fa9095803d9"},{"type":"REPORT","url":"https://github.com/usememos/memos/issues/4707#issuecomment-2898504237"}],"database_specific":{"review_status":"UNREVIEWED","url":"https://pkg.go.dev/vuln/GO-2025-3831"}}