mem0

vts-v3.0.12 scope: ts Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 29d AI Agents & Assistants

✓ No known CVEs patched

This release patches 1 known CVE

Topics

agents ai ai-agents application chatbots chatgpt

+7 more

genai llm long-term-memory memory memory-management python state-management

Affected surfaces

deps

Summary

AI summary

Bump undici dependency to >=6.27.0 to remediate CVE-2026-12151.

Full changelog

New Features:

Client: Add expirationDate to AddMemoryOptions, update(), and the Memory interface; add showExpired to SearchMemoryOptions and GetAllMemoryOptions (#5874)
LLMs: Add MiniMaxLLM provider backed by the OpenAI-compatible MiniMax API (api.minimax.io/v1, default model MiniMax-M2.7) (#5858)
LLMs: Add LiteLLM provider for routing requests through a local or hosted LiteLLM proxy (#5830)
Vector Stores: Add connectionString and ssl options to the PGVector config, allowing connection via URI instead of individual host/user/password/port fields (#5789)

Bug Fixes:

Memory (OSS): Validate and trim entity IDs (userId, agentId, runId) in deleteAll() via validateAndTrimEntityId (#5735)
Vector Stores: Use nullish coalescing for hash and timestamps in the Redis insert() and update() paths so entity payloads that omit those fields no longer crash (#5860)

Security:

Dependencies: Bump undici to >=6.27.0 via pnpm override to remediate CVE-2026-12151 (#5861)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track mem0

Get notified when new releases ship.

About mem0

Universal memory layer for AI Agents