agentiq-mem0ai (>=1.1.0a20250502, <=1.1.0a20250505), aip-agents-binary (>=0.0.0b3, <=0.4.8) +19 more potentially affected by CVE-2026-31245 via mem0ai (0.1.118)

mem0ai PYPI version 0.1.118 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - agentiq-mem0ai =1.1.0a20250502, =0.0.0b3, =1.1.0a20250429, =0.13.0, =0.1.122, =0.0.2, =0.1.0.dev7, =0.1.0, =0.0.19, =1.0.0a1, =1.1.0a20251020,...

embedchain (0.1.121) potentially affected by CVE-2026-31245 via mem0ai (0.0.20)

mem0ai PYPI version 0.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain 0.1.121 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

aiqtoolkit-mem0ai (>=1.3.0, <=1.3.1), faq-rai-sdk (0.1.4) +6 more potentially affected by CVE-2026-31245 via mem0ai (0.1.116)

mem0ai PYPI version 0.1.116 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - aiqtoolkit-mem0ai =1.3.0, =0.1.0, =0.1.2, =0.1.25, =0.0.14, =0.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-263...

chatformers (>=1.0.4, <=1.0.8) potentially affected by CVE-2026-31245 via mem0ai (0.1.19)

mem0ai PYPI version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - chatformers =1.0.4, =1.0.8 Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7VF...

graphtomation (0.0.5) potentially affected by CVE-2026-31245 via mem0ai (0.1.42)

mem0ai PYPI version 0.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - graphtomation 0.0.5 Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7VF...

embedchain (>=0.1.117, <=0.1.118) potentially affected by CVE-2026-31245 via mem0ai (0.0.5)

mem0ai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain =0.1.117, =0.1.118 Source cves: CVE-2026-31245 Source advisory: OSV:GHSA-CGX8-QGVR-F7VF...

CVE-2026-31245

The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint POST /memories. The endpoint allows unauthenticated users to submit arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by sending...