-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe critical vulnerability stemmed from missing JWT validation in the authentication flow. The patch in commit c9aa2eeb9 explicitly adds the 'if !accessToken.Valid' check in JWTMiddleware, proving this function was the point of failure. Without this check, the middleware would process tokens even if they failed cryptographic validation (e.g., invalid signature/expiry), enabling unauthorized access.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/usememos/memos | go | < 0.13.2 | 0.13.2 |
Ongoing coverage of React2Shell