Vulnerability	Vulnerable Version
H Unsafe Dependency Resolution neuro-cortex-memory is a Scientifically-grounded memory system based on computational neuroscience research Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the `CLAUDE_PROJECT_DIR` environment variable, which is treated as a trusted source directory without adequate validation. An attacker can execute arbitrary code with the privileges of the local user by convincing the victim to open a malicious project directory and invoke the visualization tool. How to fix Unsafe Dependency Resolution? Upgrade `neuro-cortex-memory` to version 3.18.0 or higher.	[,3.18.0)

Unsafe Dependency Resolution

neuro-cortex-memory is a Scientifically-grounded memory system based on computational neuroscience research

Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the CLAUDE_PROJECT_DIR environment variable, which is treated as a trusted source directory without adequate validation. An attacker can execute arbitrary code with the privileges of the local user by convincing the victim to open a malicious project directory and invoke the visualization tool.

How to fix Unsafe Dependency Resolution?

Upgrade neuro-cortex-memory to version 3.18.0 or higher.

[,3.18.0)

Go back to all versions of this package