22 matches found
CVE-2026-59163: Improper Verification of Cryptographic Signature
Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/syncserver.py parsed the JWT's header and payload using base64 decoding, then passed the token to a jwt library call with options that effectively disabled signature verification. Th...
9.1CVSS5.9AI score0.00325EPSS
SaveExploits0References2
20