GHSA-3m86-c9x3-vwm9: Graylog vulnerable to privilege escalation through API tokens

GHSA-3q26-f695-pp76: @cyanheads/git-mcp-server vulnerable to command injection in several tools

In usememos/memos 0.9.0 and prior, a user can view any content from private memos from other users via the API.

**usememos/memos Improper Access Control vulnerability**

Moderate severity GitHub Reviewed Published Dec 28, 2022 • Updated Dec 30, 2022