GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

GHSA-3q26-f695-pp76: @cyanheads/git-mcp-server vulnerable to command injection in several tools

usememos/memos 0.9.0 and prior allows an attacker to archive any user's public or private post.

**usememos/memos has Insufficient Granularity of Access Control**

Moderate severity GitHub Reviewed Published Dec 28, 2022 • Updated Dec 30, 2022