{"action":"Upgrade claude-mem to 12.0.0 or later.","affected":[{"fixed":"12.0.0","introduced":"0"}],"component":"claude-mem","cve_ids":["CVE-2026-11330"],"ecosystem":"npm","epss":0.00075,"exploited":false,"fixed_versions":["12.0.0"],"ghsa_id":"GHSA-5gvr-v6qv-h5mm","id":"tcs_01M5KF3R58YCGP3RPA32VEEXM4","modified_at":"2026-07-17T17:11:40.034100Z","published_at":"2026-06-05T15:32:23Z","references":["https://osv.dev/vulnerability/GHSA-5gvr-v6qv-h5mm","https://nvd.nist.gov/vuln/detail/CVE-2026-11330","https://github.com/thedotmack/claude-mem/pull/1494","https://github.com/thedotmack/claude-mem/commit/f32fda8b35e9fe9329f87da65c31149362a03f97","https://github.com/thedotmack/claude-mem","https://github.com/thedotmack/claude-mem/releases/tag/v12.0.0","https://vuldb.com/cve/CVE-2026-11330","https://vuldb.com/submit/832401","https://vuldb.com/vuln/368870","https://vuldb.com/vuln/368870/cti"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GHSA-5gvr-v6qv-h5mm","url":"https://osv.dev/vulnerability/GHSA-5gvr-v6qv-h5mm"}],"summary":"claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision"}