mem0

v2.0.11 Security

This release includes 4 security fixes for security teams reviewing exposed deployments.

Published 25d AI Agents & Assistants

✓ No known CVEs patched

This release patches 4 known CVEs

Topics

agents ai ai-agents application chatbots chatgpt

+7 more

genai llm long-term-memory memory memory-management python state-management

Affected surfaces

deps

Summary

AI summary

Validates input and escapes values across vector stores and graph components to prevent injection attacks.

Full changelog

Bug Fixes:

Embeddings: Guard against an embed_batch count mismatch in the OpenAI and Azure OpenAI embedders (#5966)
Memory: Re-raise LLM extraction failures instead of silently returning [] (#5878)
Vector Stores: Normalize vectors for the cosine distance strategy in FAISS (#5960)

Security:

Vector Stores: Validate OpenSearch filter values to prevent term query injection (#5986)
Vector Stores: Validate value types and escape quotes in Azure AI Search OData filters (#5983)
Vector Stores: Validate Databricks catalog/schema/table identifiers to prevent SQL injection (#5988)
Graph: Escape Neptune filter values in openCypher queries to prevent injection (#5982)

Vector Stores: Validate OpenSearch filter values to prevent term query injection
Vector Stores: Validate value types and escape quotes in Azure AI Search OData filters
Vector Stores: Validate Databricks catalog/schema/table identifiers to prevent SQL injection
Graph: Escape Neptune filter values in openCypher queries to prevent injection

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track mem0

Get notified when new releases ship.

About mem0

Universal memory layer for AI Agents