@modelcontextprotocol/server-memory
v2026.1.26MCP server for enabling memory for Claude through a knowledge graph
10
Total
4
Critical
4
High
2
Medium
Findings
unknownEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
13: // Custom path provided, use it as-is (with absolute path resolution)
14: return path.isAbsolute(process.env.MEMORY_FILE_PATH)
>>> 15: ? process.env.MEMORY_FILE_PATH
16: : path.join(path.dirname(fileURLToPath(import.meta.url)), process.env.MEMORY_FILE_PATH);
17: }Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
12: if (process.env.MEMORY_FILE_PATH) {
13: // Custom path provided, use it as-is (with absolute path resolution)
>>> 14: return path.isAbsolute(process.env.MEMORY_FILE_PATH)
15: ? process.env.MEMORY_FILE_PATH
16: : path.join(path.dirname(fileURLToPath(import.meta.url)), process.env.MEMORY_FILE_PATH);Report false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
14: return path.isAbsolute(process.env.MEMORY_FILE_PATH)
15: ? process.env.MEMORY_FILE_PATH
>>> 16: : path.join(path.dirname(fileURLToPath(import.meta.url)), process.env.MEMORY_FILE_PATH);
17: }
18: // No custom path set, check for backward compatibility migrationReport false positiveEnvironment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
10: // Handle backward compatibility: migrate memory.json to memory.jsonl if needed
11: export async function ensureMemoryFilePath() {
>>> 12: if (process.env.MEMORY_FILE_PATH) {
13: // Custom path provided, use it as-is (with absolute path resolution)
14: return path.isAbsolute(process.env.MEMORY_FILE_PATH)Report false positiveDecoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: z{.�����)^=�a
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveDecoded base64 content: z{.�����)^=�a
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.6 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 25, 2026 | critical | 10 | 4 | 0.00s |
| Feb 23, 2026 | critical | 10 | 4 | 0.00s |
| Feb 22, 2026 | critical | 10 | 4 | 0.00s |