🚨 CVE-2025-65796
Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.
🎖@cveNotify
GitHub
fix(security): Add missing authorization checks to various services by FloDwld · Pull Request #5217 · usememos/memos
This pull request fixes several security issues exploitable by low-privileged and unauthenticated users by adding missing authorization checks:
IDP service: Restrict deleting and updating IDP prov...
October 18, 2026 7
