mem0

vopenclaw-v1.0.13 scope: openclaw Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

agents ai ai-agents application chatbots chatgpt

+7 more

genai llm long-term-memory memory memory-management python state-management

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

The release fixes payload conversion for custom categories and skips runtime setup in CLI‑metadata registration mode.

Why it matters: Addresses integration reliability bugs; upgrades `mem0ai` Node SDK to version 3.0.7, remediating an axios CVE.

Summary

AI summary

Custom categories payload conversion fixes and metadata‑only registration skip improve integration reliability.

Changes in this release

Type	Severity	Summary	CVE
Dependency	High	Bumped `mem0ai` Node SDK from 3.0.3 to 3.0.7, including axios CVE remediation. Bumped `mem0ai` Node SDK from 3.0.3 to 3.0.7, including axios CVE remediation. Source: llm_adapter@2026-06-13 Confidence: low	—
Dependency	Medium	Updated pnpm override for `uuid` to >=11.1.1 to resolve a MEDIUM Dependabot alert. Updated pnpm override for `uuid` to >=11.1.1 to resolve a MEDIUM Dependabot alert. Source: llm_adapter@2026-06-13 Confidence: high	—
Bugfix	Medium	Convert `customCategories` map to list before passing to Mem0 SDK on add calls. Convert `customCategories` map to list before passing to Mem0 SDK on add calls. Source: llm_adapter@2026-06-13 Confidence: high	—
Bugfix	Medium	Skip runtime setup when registration mode is "cli-metadata" during metadata registration. Skip runtime setup when registration mode is "cli-metadata" during metadata registration. Source: llm_adapter@2026-06-13 Confidence: high	—
Refactor	Low	Moved Mem0 OpenClaw plugin from repo-root `openclaw/` to `integrations/openclaw/` and updated repository directory in package.json. Moved Mem0 OpenClaw plugin from repo-root `openclaw/` to `integrations/openclaw/` and updated repository directory in package.json. Source: llm_adapter@2026-06-13 Confidence: high	—

Full changelog

Mem0 OpenClaw Plugin (v1.0.13)

Fixes:

Custom categories payload: customCategories (a Record<string, string> map) is now converted via the new customCategoryMapToList() helper into the Array<Record<string, string>> shape the Mem0 SDK expects on add calls — previously the raw object was passed as custom_categories and silently ignored (#5345)
Skip runtime setup during metadata registration: register() now detects registrationMode === "cli-metadata", registers only the CLI commands, and returns early — avoiding backend initialization, service/tool registration, and hook installation during OpenClaw's metadata-only registration pass (#5383)

Security:

Bumped mem0ai from 3.0.3 to 3.0.7 (latest Node SDK) — includes the transitive axios CVE remediation shipped in 3.0.6 (#5460)
Added pnpm override uuid@<11.1.1 → >=11.1.1 to resolve an open MEDIUM Dependabot alert (#5489)

Improvements:

Repo consolidation: Plugin moved from repo-root openclaw/ to integrations/openclaw/; package.json repository.directory updated to match so npm provenance links to the correct subdirectory (#5491)

Tests:

Added customCategoryMapToList unit tests and a PlatformProvider test asserting custom_categories is passed to the Mem0 SDK as a list (#5345)
Added a regression test asserting cli-metadata registration registers only CLI commands and triggers no runtime side effects (#5383)

Security Fixes

dep: axios CVE remediated in mem0ai 3.0.7 (via transitive update from 3.0.6)
pnpm override uuid@=11.1.1 resolves open MEDIUM Dependabot alert

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track mem0

Get notified when new releases ship.

About mem0

Universal memory layer for AI Agents

All releases →