CVE-2025-50738

The Memos application (up to version v0.24.3 ) is vulnerable to Cross-Site Scripting (XSS) via unrestricted external image embedding. The application allows the embedding of markdown images with arbitrary URLs; when a user views a memo containing such an image, the browser automatically fetches t...