Skip to content
OpenAdvisories

Package · npm

mcp-memory-keeper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2026-54561

    MCP Memory Keeper: Arbitrary local file read in mcp-memory-keeper context_import via unvalidated filePath

    MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath directly to fs.readFileSync without restricting the path to an export directory…

    mkreyman mcp-memory-keeper mcp-memory-keeper npm