CVE-2026-71272 Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext()

Memos' webhook dispatch function safeDialContext internal/webhook/webhook.go resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPorthost, port using the original hostname rather than the...

CVE-2026-71272 Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext()

Memos' webhook dispatch function safeDialContext internal/webhook/webhook.go resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPorthost, port using the original hostname rather than the...

CVE-2026-71271

The CVE affects Memos server webhook URL validation. The isReservedIP() check validates candidate IPs against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified(), unlike isInternalIP() which does. Linux redirects connections to 0.0.0.0 to loopback (127.0.0.1). An attacker...

CVE-2026-71271 Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass

Memos' webhook URL validation, isReservedIP internal/webhook/validate.go, checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified — unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/htmlmeta.go, which does...

CVE-2026-71271 Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass

Memos' webhook URL validation, isReservedIP internal/webhook/validate.go, checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified — unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/htmlmeta.go, which does...

PT-2026-68144

Name of the Vulnerable Software and Affected Versions Memos affected versions not specified Description Insufficient validation of webhook URLs occurs in the isReservedIP function located in internal/webhook/validate.go. The function checks candidate IPs against a reserved CIDR list but omits the...

CVE-2026-71271: Server-Side Request Forgery (SSRF)

Memos' webhook URL validation, isReservedIP internal/webhook/validate.go, checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified — unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/htmlmeta.go, which does...

PT-2026-68145

Name of the Vulnerable Software and Affected Versions Memos affected versions not specified Description The webhook dispatch function safeDialContext internal/webhook/webhook.go resolves the target hostname using net.DefaultResolver.LookupHost and validates the resulting IPs against reserved...

CVE-2026-71272: Time-of-check Time-of-use (TOCTOU) Race Condition

Memos' webhook dispatch function safeDialContext internal/webhook/webhook.go resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPorthost, port using the original hostname rather than the...

Should You Use AI for a Task? Here’s a Simple Way to Decide

This essay originally appeared inThe Guardian. I teach public policy at the Harvard Kennedy School and the Munk School at the University of Toronto. And it will come as no surprise to you that my students regularly use AI to complete their writing assignments. Doing so is a waste of their tuition...

Memos Panel - Detect

Memos is a privacy-first, lightweight note-taking service !/usr/bin/env python3 -- coding: utf-8 -- """Memos is a privacy-first, lightweight note-taking service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Memos...

memos-webhook (>=0.6.0a1, <=0.6.0) potentially affected by CVE-2026-26013 via langchain-core (0.2.6)

langchain-core PYPI version 0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - memos-webhook =0.6.0a1, =0.6.0 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

GO-2026-5403 Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos

Memos has an Incorrect Privilege Assignment issue in github.com/usememos/memos...

memos-webhook (>=0.6.0a1, <=0.6.0) potentially affected by CVE-2026-55443 via langchain (0.2.4)

langchain PYPI version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - memos-webhook =0.6.0a1, =0.6.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

memos-webhook (>=0.6.0a1, <=0.6.0) potentially affected by CVE-2026-55443 via langchain (0.2.4)

langchain PYPI version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - memos-webhook =0.6.0a1, =0.6.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

CVE-2026-6634

A weakness has been identified in usememos memos up to 0.22.1. This affects the function memosaccesstoken of the file src/App.tsx of the component UpdateInstanceSetting. This manipulation of the argument additionalStyle/additionalScript causes improper authorization. The attack is possible to be...

EUVD-2026-34018

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

CVE-2026-30586

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...

CVE-2026-30586: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZESCHEMA, Memo Rendering Component, and Public/Private Memo View pages...