doobidoo mcp-memory-service

• CVE-2026-50027 Critical 9.8 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete 1.0%
• CVE-2026-49291 High 8.1 mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call 0.5%
• CVE-2026-33010 High 8.1 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft 0.4%
• CVE-2026-29787 Medium 5.3 mcp-memory-service: System Information Disclosure via Health Endpoint 0.4%