CVE-2026-33010
2 advisories.
PyPI/mcp-memory-service CVE-2026-33010: high 8.1, EPSS 0.48%
mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Action: Upgrade mcp-memory-service to 10.25.1 or later.
pip install mcp-memory-service==10.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.25.1 | - |
Fixed versions
| 10.25.1 |
Sources
- osv: GHSA-g9rg-8vq5-mpwm
- https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-g9rg-8vq5-mpwm
- https://nvd.nist.gov/vuln/detail/CVE-2026-33010
- https://github.com/doobidoo/mcp-memory-service
CVE-2026-33010 · published · modified · JSON
PyPI/mcp-memory-service CVE-2026-33010: high 8.1, EPSS 0.48%
mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
Action: Upgrade mcp-memory-service to 10.25.1 or later.
pip install mcp-memory-service==10.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.25.1 | - |
Fixed versions
| 10.25.1 |
Sources
- osv: PYSEC-2026-2625
- https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-g9rg-8vq5-mpwm
- https://nvd.nist.gov/vuln/detail/CVE-2026-33010
- https://github.com/doobidoo/mcp-memory-service
- https://pypi.org/project/mcp-memory-service
- https://github.com/advisories/GHSA-g9rg-8vq5-mpwm
CVE-2026-33010 · published · modified · JSON