telegram

Apr 9, 2024 GO-2024-3046 +1 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

Changes in this version

+ const Spoiler

Mar 9, 2024 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Feb 24, 2024 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Feb 3, 2024 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Jan 28, 2024 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Jan 18, 2024 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Dec 15, 2023 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Dec 10, 2023 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Nov 19, 2023 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Oct 29, 2023 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Oct 21, 2023 GO-2024-3046 +2 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Oct 5, 2023 GO-2024-3046 +3 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Sep 23, 2023 GO-2024-3046 +3 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Sep 18, 2023 GO-2024-3046 +3 more

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Sep 16, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Changes in this version

type Bot

+ func (b *Bot) SendMessage(ctx context.Context, chatID int64, text string) (*Message, error)

Aug 13, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Aug 5, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Jul 26, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Jul 22, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Jul 16, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Changes in this version

+ const Bold

+ const BotCommand

+ const CashTag

+ const Channel

+ const Code

+ const Email

+ const Group

+ const Hashtag

+ const Italic

+ const Mention

+ const PhoneNumber

+ const Pre

+ const Private

+ const Strikethrough

+ const SuperGroup

+ const TextLink

+ const TextMention

+ const URL

+ const Underline

+ type Animation struct

+ Duration int

+ FileID string

+ FileName string

+ FileSize int

+ FileUniqueID string

+ Height int

+ MimeType string

+ Thumbnail *PhotoSize

+ Width int

+ type Attachment struct

+ Data []byte

+ FileName string

+ FileSize int64

+ MimeType string

+ func (b Attachment) GetMimeType() string

+ type Audio struct

+ Duration int

+ FileID string

+ FileName string

+ FileSize int

+ FileUniqueID string

+ MimeType string

+ Performer string

+ Thumbnail *PhotoSize

+ Title string

type Chat

+ UserName string

+ type ChatType string

+ type Document struct

+ FileID string

+ FileName string

+ FileSize int

+ FileUniqueID string

+ MimeType string

+ Thumbnail *PhotoSize

type Message

+ Animation *Animation

+ Audio *Audio

+ CaptionEntities []MessageEntity

+ Document *Document

+ Entities []MessageEntity

+ ForwardFromChat *Chat

+ ForwardFromMessageID int

+ Video *Video

+ VideoNote *VideoNote

+ Voice *Voice

+ func (m Message) GetMessageLink() string

+ func (m Message) IsSupported() bool

+ type MessageEntity struct

+ Language string

+ Length int

+ Offset int

+ Type MessageEntityType

+ URL string

+ User *User

+ type MessageEntityType string

+ type Video struct

+ Duration int

+ FileID string

+ FileName string

+ FileSize int

+ FileUniqueID string

+ Height int

+ MimeType string

+ Thumbnail *PhotoSize

+ Width int

+ type VideoNote struct

+ Duration int

+ FileID string

+ FileSize int

+ FileUniqueID string

+ Length int

+ Thumbnail *PhotoSize

+ type Voice struct

+ Duration int

+ FileID string

+ FileSize int

+ FileUniqueID string

+ MimeType string

Jul 1, 2023 GO-2023-2065 +4 more

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Changes in this version

+ var ErrInvalidToken = errors.New("token is invalid")

+ type Bot struct

+ func NewBotWithHandler(h Handler) *Bot

+ func (b *Bot) AnswerCallbackQuery(ctx context.Context, callbackQueryID, text string) error

+ func (b *Bot) EditMessage(ctx context.Context, chatID, messageID int, text string, ...) (*Message, error)

+ func (b *Bot) GetFile(ctx context.Context, fileID string) (*File, error)

+ func (b *Bot) GetUpdates(ctx context.Context, offset int) ([]Update, error)

+ func (b *Bot) SendReplyMessage(ctx context.Context, chatID, replyID int, text string) (*Message, error)

+ func (b *Bot) Start(ctx context.Context)

+ type CallbackQuery struct

+ ChatInstance string

+ Data string

+ From User

+ GameShortName string

+ ID string

+ InlineMessageID string

+ Message *Message

type Handler

+ BotToken func(ctx context.Context) string

+ CallbackQueryHandle func(ctx context.Context, bot *Bot, callbackQuery CallbackQuery) error

+ type InlineKeyboardButton struct

+ CallbackData string

+ Text string

type Update

+ CallbackQuery *CallbackQuery

May 27, 2023 GO-2023-2036 +6 more

  GO-2023-2036: usememos/memos vulnerable to privilege escalation in github.com/usememos/memos

  GO-2023-2038: Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos

  GO-2023-2065: Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos

  GO-2024-3046: memos vulnerable to Server-Side Request Forgery in /api/resource in github.com/usememos/memos

  GO-2024-3047: memos vulnerable to Server-Side Request Forgery in /o/get/httpmeta in github.com/usememos/memos

  GO-2024-3049: memos vulnerable to Server-Side Request Forgery and Cross-site Scripting in github.com/usememos/memos

  GO-2024-3088: memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

Changes in this version

+ var ErrNoToken = errors.New("token is empty")

+ type Chat struct

+ FirstName string

+ ID int

+ LastName string

+ Title string

+ Type string

+ type File struct

+ FileID string

+ FilePath string

+ FileSize int64

+ FileUniqueID string

+ type Handler interface

+ MessageHandle func(ctx context.Context, message Message, blobs map[string][]byte) error

+ RobotToken func(ctx context.Context) string

+ type Message struct

+ Caption *string

+ Chat *Chat

+ Date int

+ From User

+ MediaGroupID *string

+ MessageID int

+ Photo []PhotoSize

+ Text *string

+ func (m Message) GetMaxPhotoFileID() string

+ type PhotoSize struct

+ FileID string

+ FileSize int64

+ FileUniqueID string

+ Height int

+ Width int

+ type Robot struct

+ func NewRobotWithHandler(h Handler) *Robot

+ func (r *Robot) EditMessage(ctx context.Context, chatID, messageID int, text string) (*Message, error)

+ func (r *Robot) GetFile(ctx context.Context, fileID string) (*File, error)

+ func (r *Robot) GetUpdates(ctx context.Context, offset int) ([]Update, error)

+ func (r *Robot) SendReplyMessage(ctx context.Context, chatID, replyID int, text string) (*Message, error)

+ func (r *Robot) Start(ctx context.Context)

+ type Update struct

+ Message *Message

+ UpdateID int

+ type User struct

+ ID int