Search
Find a vulnerability
Search criteria
2 vulnerabilities found for memory-graph by aaronsb
CVE-2026-19285 (GCVE-0-2026-19285)
Vulnerability from nvd – Published: 2026-08-08 12:45 – Updated: 2026-08-14 15:48
VLAI
EPSS
VEX
Title
aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal
Summary
A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 15:48 UTC
CWE
- CWE-22 - Path Traversal
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/387025 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/387025/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-19285 | third-party-advisory |
| https://vuldb.com/submit/865228 | third-party-advisory |
| https://github.com/aaronsb/memory-graph/issues/14 | issue-tracking |
| https://github.com/aaronsb/memory-graph/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| aaronsb | memory-graph |
Affected:
5cfd2382778837b9f6399080956eee670d00452c
cpe:2.3:a:aaronsb:memory-graph:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-19285",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T15:48:31.971864Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T15:48:38.614Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/aaronsb/memory-graph/issues/14"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aaronsb:memory-graph:*:*:*:*:*:*:*:*"
],
"product": "memory-graph",
"vendor": "aaronsb",
"versions": [
{
"status": "affected",
"version": "5cfd2382778837b9f6399080956eee670d00452c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "gongyanyu02 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.3,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-08T12:45:08.139Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-387025 | aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/387025"
},
{
"name": "VDB-387025 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/387025/cti"
},
{
"name": "CVE-2026-19285 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19285"
},
{
"name": "Submit #865228 | aaronsb memory-graph unknown Path Traversal",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/865228"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/aaronsb/memory-graph/issues/14"
},
{
"tags": [
"product"
],
"url": "https://github.com/aaronsb/memory-graph/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-07T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-07T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-07T17:41:52.000Z",
"value": "VulDB entry last update"
}
],
"title": "aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19285",
"datePublished": "2026-08-08T12:45:08.139Z",
"dateReserved": "2026-08-07T15:36:47.250Z",
"dateUpdated": "2026-08-14T15:48:38.614Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-19285 (GCVE-0-2026-19285)
Vulnerability from cvelistv5 – Published: 2026-08-08 12:45 – Updated: 2026-08-14 15:48
VLAI
EPSS
VEX
Title
aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal
Summary
A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-14 15:48 UTC
CWE
- CWE-22 - Path Traversal
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/387025 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/387025/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-19285 | third-party-advisory |
| https://vuldb.com/submit/865228 | third-party-advisory |
| https://github.com/aaronsb/memory-graph/issues/14 | issue-tracking |
| https://github.com/aaronsb/memory-graph/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| aaronsb | memory-graph |
Affected:
5cfd2382778837b9f6399080956eee670d00452c
cpe:2.3:a:aaronsb:memory-graph:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-19285",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-14T15:48:31.971864Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-14T15:48:38.614Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/aaronsb/memory-graph/issues/14"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:aaronsb:memory-graph:*:*:*:*:*:*:*:*"
],
"product": "memory-graph",
"vendor": "aaronsb",
"versions": [
{
"status": "affected",
"version": "5cfd2382778837b9f6399080956eee670d00452c"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "gongyanyu02 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.3,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-08T12:45:08.139Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-387025 | aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/387025"
},
{
"name": "VDB-387025 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/387025/cti"
},
{
"name": "CVE-2026-19285 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-19285"
},
{
"name": "Submit #865228 | aaronsb memory-graph unknown Path Traversal",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/865228"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/aaronsb/memory-graph/issues/14"
},
{
"tags": [
"product"
],
"url": "https://github.com/aaronsb/memory-graph/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-07T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-07T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-07T17:41:52.000Z",
"value": "VulDB entry last update"
}
],
"title": "aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-19285",
"datePublished": "2026-08-08T12:45:08.139Z",
"dateReserved": "2026-08-07T15:36:47.250Z",
"dateUpdated": "2026-08-14T15:48:38.614Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}