HIGH8.1PyPI
GHSA-2r68-g678-7qr3· CVE-2026-49291, PYSEC-2026-2622mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Modified: 7/13/2026
package
PyPI/mcp-memory-service
pkg:pypi/mcp-memory-service
MEDIUM5.3PyPI
GHSA-73hc-m4hx-79pj· CVE-2026-29787, PYSEC-2026-2623mcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-84hp-mqvj-3p8h· CVE-2026-50027, PYSEC-2026-2624mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-g9rg-8vq5-mpwm· CVE-2026-33010, PYSEC-2026-2625mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2622· CVE-2026-49291, GHSA-2r68-g678-7qr3mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2623· CVE-2026-29787, GHSA-73hc-m4hx-79pjmcp-memory-service Vulnerable to System Information Disclosure via Health Endpoint
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-2624· CVE-2026-50027, GHSA-84hp-mqvj-3p8hmcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2625· CVE-2026-33010, GHSA-g9rg-8vq5-mpwmmcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Modified: 7/13/2026