https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-31245.htmlhttps://patchthecve.com/cve/CVE-2026-31245.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 5.3: The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories). The endpoint allows unauthenticated users to submit arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by sending unahttps://patchthecve.com/cve/CVE-2026-31244.htmlhttps://patchthecve.com/cve/CVE-2026-31244.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.5: The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}). The endpoint allows unauthenticated users to delete arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this https://patchthecve.com/cve/CVE-2026-31243.htmlhttps://patchthecve.com/cve/CVE-2026-31243.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.5: The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE request that triggers a reset operation, leading to the execution of a CREATE TABhttps://patchthecve.com/cve/CVE-2026-31242.htmlhttps://patchthecve.com/cve/CVE-2026-31242.htmlMon, 19 Oct 2026 22:10:00 +0000CRITICAL 9.1: The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint. An unauthenticated attacker can send a DELETE request that triggers a reset operation, leading to the execution of a DROP TABLE SQL statement. This https://patchthecve.com/cve/CVE-2026-31241.htmlhttps://patchthecve.com/cve/CVE-2026-31241.htmlMon, 19 Oct 2026 22:10:00 +0000MEDIUM 6.5: The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories). The endpoint allows unauthenticated users to delete memory records by specifying arbitrary user identifiers (e.g., user_id, run_id, agent_id) in the request query parameters