{"data":{"id":"4f0500eb-534f-46fe-8830-98b837ded3e5","title":"CVE-2026-11330: A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function…","summary":"CVE-2026-11330 affects thedotmack claude-mem up to 11.0.1. The function computeObservationContentHash in src/services/sqlite/observations/store.ts, part of the Observation Content Hash Handler component, uses a weak hash. Exploitation requires local access, has high complexity, and is described as difficult.","solution":"Upgrade to version 12.0.0. Patch name: f32fda8b35e9fe9329f87da65c31149362a03f97.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11330","publishedAt":"2026-06-05T14:16:35.457Z","cveId":"CVE-2026-11330","cweIds":["CWE-327","CWE-328"],"cvssScore":"3.6","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["claude-mem@< 12.0.0 (fixed: 12.0.0)"],"affectedPackageNames":["claude-mem"],"affectedPackageRefs":["npm:claude-mem"],"affectedVendors":[],"affectedVendorsRaw":["claude-mem"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"thedotmack claude-mem weak hash in observation content hashing","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","attackVector":"local","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00075,"epssCheckedAt":"2026-11-05T00:11:44.335Z","kevDateAdded":null,"advisoryAliases":["GHSA-5gvr-v6qv-h5mm"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:50.556Z","patchAvailable":true,"disclosureDate":"2026-06-05T14:16:35.457Z","fixReleasedAt":"2026-04-07T21:23:17.248Z","daysToFix":-59,"fixCheckedAt":"2026-10-29T21:34:59.053Z","capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"claude-mem","fixedVersion":"12.0.0","matchedVersion":"12.0.0","fixReleasedAt":"2026-04-07T21:23:17.248Z","daysToFix":-59,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:58.907Z"}]}}