All products

mcp-memory-service

PyPI · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/DeleteCVE-2026-50027 · GHSA-84HP-MQVJ-3P8HVersion ranges need review. mcp-memory-service PyPI Critical Fix reported
mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory TheftCVE-2026-33010 · GHSA-G9RG-8VQ5-MPWMVersion ranges need review. mcp-memory-service PyPI High Fix reported
mcp-memory-service Vulnerable to System Information Disclosure via Health EndpointCVE-2026-29787 · GHSA-73HC-M4HX-79PJVersion ranges need review. mcp-memory-service PyPI Medium Fix reported
mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/callCVE-2026-49291 · GHSA-2R68-G678-7QR3Version ranges need review. mcp-memory-service PyPI High Fix reported