Skip to content
OpenAdvisories

Package · npm

mem0ai

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-116575

    Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

    Mem0 provides persistent memory infrastructure for AI agents and applications. Prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6, _build_session_scope() in mem0/memory/main.py and Memory.buildSessionScope() in the TypeScript SDK join caller-controlled user_…

    mem0ai mem0 mem0ai mem0ai npm PyPI