CVE-2026-6634

UseMemoS memos up to 0.22.1 has a vulnerability in the UpdateInstanceSetting component, specifically the memos_access_token function in src/App.tsx. The issue stems from manipulation of the additionalStyle/additionalScript arguments, leading to improper authorization. Exploitation is possible rem...