CVE-2026-19285

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19285
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19285.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19285
Published
2026-08-08T12:45:08Z
Modified
2026-10-08T02:49:20Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal
Details

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19285.json"
}
References

Affected packages

Git / github.com/aaronsb/memory-graph

Affected ranges

Type
GIT
Repo
https://github.com/aaronsb/memory-graph
Events
Introduced
5cfd2382778837b9f6399080956eee670d00452c
Last Affected
5cfd2382778837b9f6399080956eee670d00452c

Affected versions

Other
5cfd2382778837b9f6399080956eee670d00452c

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19285.json"