mem0

vts-v3.0.9 scope: ts Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agents ai ai-agents application chatbots chatgpt

+7 more

genai llm long-term-memory memory memory-management python state-management

Affected surfaces

deps

Summary

AI summary

Fix Anthropic tool choice format and parsing, preserve custom metadata on memory updates, and bump esbuild for a security fix.

Full changelog

Bug Fixes:

LLMs: Fix Anthropic tool_choice format — was incorrectly sent as a bare string "auto" (rejected by the API); now correctly sent as { type: "auto" }. Also fixes tool response parsing: tool_use blocks are now parsed into toolCalls objects instead of throwing. Updated default model to claude-sonnet-4-6 and default max_tokens to 2000 to match the Python provider. Added temperature, topP, and maxTokens to LLMConfig so Anthropic params can be configured (#5537)
Memory (OSS): Preserve custom metadata fields during update() — fields such as category, priority, and other user-defined keys were previously dropped on update; the existing payload is now spread before applying the new data (#5480)
Client: Preserve user-defined schema keys in createMemoryExport (#5594)

Security:

Dependencies: Bump esbuild to >=0.28.1 across all npm packages via pnpm overrides to remediate upstream vulnerability (#5563)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track mem0

Get notified when new releases ship.

About mem0

Universal memory layer for AI Agents