Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2624
  • PyPI/mcp-memory-service
 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete 13 Jul
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-2622
  • PyPI/mcp-memory-service
 mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call 13 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2625
  • PyPI/mcp-memory-service
 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft 13 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2623
  • PyPI/mcp-memory-service
 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint 13 Jul
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-84hp-mqvj-3p8h
  • PyPI/mcp-memory-service
 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete 02 Jul
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-2r68-g678-7qr3
  • PyPI/mcp-memory-service
 mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call 26 Jun
  • Fix available
  • Severity - 8.1 (High)
GHSA-g9rg-8vq5-mpwm
  • PyPI/mcp-memory-service
 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft 07 Mar
  • Fix available
  • Severity - 8.1 (High)
GHSA-73hc-m4hx-79pj
  • PyPI/mcp-memory-service
 mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint 05 Mar
  • Fix available
  • Severity - 5.3 (Medium)