[github.com/usememos/memos] Memos Cross-site Scripting vulnerability

Memos, an open-source, self-hosted memo hub, is vulnerable to stored Cross-site Scripting (XSS) in versions 0.8.3 and prior. A patch is available and anticipated to be part of version 0.9.0.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-4609
• https://github.com/usememos/memos/commit/726285e63467820f94cbf872abe71025a161c212
• https://huntr.dev/bounties/5b3115c5-776c-43d3-a7be-c8dc13ab81ce
• https://github.com/advisories/GHSA-rgj5-jj5q-v3v7