Is github.com/usememos/memos safe to use?

github.com/usememos/memos has 7 known vulnerabilities on the latest version (v0.28.0). DepScope rates its health at 83/100 (low risk).

What is the latest version of github.com/usememos/memos?

The latest version of github.com/usememos/memos is v0.28.0, released 2026-04-27.

Does github.com/usememos/memos have known vulnerabilities?

Yes. github.com/usememos/memos has 7 known vulnerabilities. See depscope.dev/pkg/go/github.com/usememos/memos for details.

Is github.com/usememos/memos deprecated?

No, github.com/usememos/memos is actively maintained. Latest release: v0.28.0 (2026-04-27).

What are alternatives to github.com/usememos/memos?

DepScope has no curated alternatives for github.com/usememos/memos at this time.

What license does github.com/usememos/memos use?

github.com/usememos/memos is licensed under MIT.

github.com/usememos/memos

govv0.28.0

Open-source, self-hosted note-taking tool built for quick capture. Markdown-native, lightweight, and fully yours.

License MITpermissive92 versions362 maintainers0 deps59,272 weekly dl

usememos/memos

/ 100

Health

update required

github.com/usememos/[email protected] has vulnerabilities — update to latest

Update to >= 0.10.4-0.20230211093429-b11d2130a084 to fix known vulnerabilities

1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

18/25

security

15/15

maturity

15/15

community

Vulnerabilities

1 high1 medium5 low

Advisories (7)

Severity	ID	Summary	Fixed in
high	CVE-2023-4698	usememos/memos vulnerable to improper input validation	—
medium	CVE-2022-25978	Cross Site Scripting in usememos/memos	0.10.4-0.20230211093429-b11d2130a084
unknown	CVE-2022-25978	Cross site scripting in github.com/usememos/memos	0.10.4-0.20230211093429-b11d2130a084
unknown	CVE-2025-22952	Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos	—
unknown	CVE-2025-56760	Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos	—
unknown	CVE-2025-56761	Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos	—
unknown	CVE-2024-21635	Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos	—

Maintainer trust

Active maintainers (3m)

7

Contributors (12m)

7

Primary author dominance

63%

GitHub stars

59,178

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/usememos/memos

Last updated · 2026-04-27T00:56:00Z