{"action":"Upgrade mem0ai to 1.0.8 or later.","affected":[{"fixed":"1.0.8","introduced":"0.1.117"}],"component":"mem0ai","cve_ids":["CVE-2026-115324"],"ecosystem":"PyPI","epss":0.00322,"exploited":false,"fixed_versions":["1.0.8"],"ghsa_id":"GHSA-7587-9684-52r6","id":"tcs_01M5NASSNJJTJZ9FBY00Q6PMRR","modified_at":"2026-10-23T21:00:04.366260359Z","published_at":"2026-10-22T12:31:17Z","references":["https://osv.dev/vulnerability/GHSA-7587-9684-52r6","https://nvd.nist.gov/vuln/detail/CVE-2026-115324","https://github.com/mem0ai/mem0/issues/4073","https://github.com/mem0ai/mem0/pull/4558","https://github.com/mem0ai/mem0/commit/a2ffca32660537b7b304305f36774ae2a13452cb","https://github.com/mem0ai/mem0","https://github.com/mem0ai/mem0/blob/v1.0.7/mem0/vector_stores/databricks.py","https://github.com/mem0ai/mem0/releases/tag/v1.0.8","https://www.vulncheck.com/advisories/mem0-0.1.117-before-1.0.8-sql-injection-via-databricks-vector-store"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7587-9684-52r6","url":"https://osv.dev/vulnerability/GHSA-7587-9684-52r6"}],"summary":"mem0ai Databricks vector store vulnerable to SQL injection"}