AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
LLM frameworks · Mem0 (open source)

Mem0

Open-source memory layer that gives AI agents and apps persistent, per-user memory, with Python and TypeScript SDKs.

1Advisories
0critical
0high
1medium
2026-10-26Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Mem0

01. mediumData leakageNew this weekCVE-2026-116575: Mem0 could mix up two users' conversation history, leaking one tenant's messages to anotherMem0's Python and TypeScript SDKs built the key for each session's recent messages by joining user_id, agent_id and run_id with unescaped & and = characters. A caller who controls only their own run_id or agent_id could craft a value that produces another tenant's key, then read that tenant's recent raw messages and write into their history. Fixed in Python SDK 2.0.18 and TypeScript SDK 3.1.6. Mem0 2026-10-26
The weekly email

One email a week. Only what changed.

Every new security hole in AI coding tools, MCP servers, app builders and the stacks they generate (Next.js, Supabase, Node, PHP), each with how to check your app and the fix. No roundups of things you already read.

Free, one email a week. Read the latest issue first if you like. One-click unsubscribe in every email. We never sell or share addresses.