CVE-2026-54561
1 advisory.
npm/mcp-memory-keeper CVE-2026-54561: medium 6.2
mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath
Action: Upgrade mcp-memory-keeper to 0.13.0 or later.
npm i mcp-memory-keeper@0.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.13.0 | - |
Fixed versions
| 0.13.0 |
Sources
- osv: GHSA-f7wf-v2vw-mpcx
- https://github.com/mkreyman/mcp-memory-keeper/security/advisories/GHSA-f7wf-v2vw-mpcx
- https://github.com/mkreyman/mcp-memory-keeper/issues/35
- https://github.com/mkreyman/mcp-memory-keeper/pull/36
- https://github.com/mkreyman/mcp-memory-keeper/commit/84f6dfa692736a34ff36e2d2cf2188b71facf73b
- https://github.com/mkreyman/mcp-memory-keeper
- https://github.com/mkreyman/mcp-memory-keeper/releases/tag/v0.13.0
CVE-2026-54561 · published · modified · JSON