{"action":"Upgrade mcp-memory-service to 10.25.1 or later.","affected":[{"fixed":"10.25.1","introduced":"0"}],"component":"mcp-memory-service","cve_ids":["CVE-2026-33010"],"ecosystem":"PyPI","epss":0.00394,"exploited":false,"fixed_versions":["10.25.1"],"ghsa_id":"GHSA-g9rg-8vq5-mpwm","id":"tcs_01M5KFHAVDBVK2R4798WH1PYWD","modified_at":"2026-07-13T16:42:58.062363435Z","published_at":"2026-03-07T02:12:26Z","references":["https://osv.dev/vulnerability/GHSA-g9rg-8vq5-mpwm","https://github.com/doobidoo/mcp-memory-service/security/advisories/GHSA-g9rg-8vq5-mpwm","https://nvd.nist.gov/vuln/detail/CVE-2026-33010","https://github.com/doobidoo/mcp-memory-service"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g9rg-8vq5-mpwm","url":"https://osv.dev/vulnerability/GHSA-g9rg-8vq5-mpwm"}],"summary":"mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft"}