https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T05:41:40.422260+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-84203 fkie_cve-2026-84203 2026-10-02T05:41:40.440858+00:00

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely, bypassing the password change security measure.

 https://db.gcve.eu/vuln/ghsa-47v8-26mf-hw38 GHSA-47v8-26mf-hw38 2026-10-02T05:41:40.440924+00:00

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely, bypassing the password change security measure.