GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

GHSA-3q26-f695-pp76: @cyanheads/git-mcp-server vulnerable to command injection in several tools

usememos/memos 0.9.0 and prior is vulnerable to full account takeover via changing user name, email address, and display name.

**usememos/memos Improper Access Control vulnerability**

High severity GitHub Reviewed Published Dec 28, 2022 • Updated Dec 30, 2022