Vulnerability	Vulnerable Version
L Use of Weak Hash claude-mem is a Memory compression system for Claude Code - persist context across sessions Affected versions of this package are vulnerable to Use of Weak Hash via the `computeObservationContentHash` function in `src/services/sqlite/observations/store.ts`. An attacker can cause two different observation inputs to produce the same content hash by supplying values whose concatenated `memorySessionId`, `title`, and `narrative` fields form an ambiguous string. This can make distinct observations collide in the SQLite observations store, leading the application to treat different content as the same record. The impact is incorrect observation lookup or deduplication behavior for local users running the affected component. How to fix Use of Weak Hash? Upgrade `claude-mem` to version 12.0.0 or higher.	>=10.4.0 <12.0.0

Use of Weak Hash

claude-mem is a Memory compression system for Claude Code - persist context across sessions

Affected versions of this package are vulnerable to Use of Weak Hash via the computeObservationContentHash function in src/services/sqlite/observations/store.ts. An attacker can cause two different observation inputs to produce the same content hash by supplying values whose concatenated memorySessionId, title, and narrative fields form an ambiguous string. This can make distinct observations collide in the SQLite observations store, leading the application to treat different content as the same record. The impact is incorrect observation lookup or deduplication behavior for local users running the affected component.

How to fix Use of Weak Hash?

Upgrade claude-mem to version 12.0.0 or higher.

>=10.4.0 <12.0.0

Go back to all versions of this package