{"action":"No fix published. Pin and monitor.","affected":[],"component":"memoryos","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KH93G1QQAPGANF4ACQTS9W","modified_at":"2026-09-23T20:15:02.988658079Z","published_at":"2026-09-23T19:52:25Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3987","https://safedep.io/memtensor-sckit-worm-npm-pypi/","https://inspector.pypi.io/project/memoryos/2.0.34/packages/3e/9a/4d766a52dcabcbf440aa8f8f1eaf2adca041f93913271d8c342c20ae167c/memoryos-2.0.34.tar.gz//memoryos-2.0.34/src/memos/_stage0.py","https://github.com/MemTensor/MemOS/commit/b52958fdc9cdb6c81be90123bcf65c42be35b5b5","https://pypi.org/project/MemoryOS/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-3987","url":"https://osv.dev/vulnerability/PYSEC-2026-3987"}],"summary":"MemoryOS 2.0.34 was published with a credential-stealing binary"}