GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

GHSA-3q26-f695-pp76: @cyanheads/git-mcp-server vulnerable to command injection in several tools

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos 0.9.0 and prior.

**usememos/memos vulnerable to stored Cross-site Scripting**

Moderate severity GitHub Reviewed Published Dec 29, 2022 • Updated Dec 30, 2022