Am I affected by claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision? What should I do?
A weakness has been identified in thedotmack claude-mem up to 11.0.1.
Affected: claude-mem < 12.0.0. Fixed in: 12.0.0. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/06/cve-2026-11330-claude-mem (opens external site)
1 answer
Am I affected? Affected: claude-mem < 12.0.0. Fixed in: 12.0.0.
- Check your version: run
npm ls claude-mem. Versions < 12.0.0 of claude-mem are affected.
What to do now
- Upgrade to the fixed version: run
npm install claude-mem@12.0.0(first patched version 12.0.0). - Upgrade to version 12.0.0.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-5gvr-v6qv-h5mm (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/06/cve-2026-11330-claude-mem (opens external site)
Did this work for you?- Check your version: run