Fetching from the wire…
Public story · 2026-08-03 · high
The same release also fixed an Elasticsearch bug that silently capped every KNN query at 10 hits, and caps Supabase results at 1000 instead of erroring.
Why now: Mem0 shipped the fix August 1, two days before this coverage, leaving barely any time for downstream products to confirm what their own delete_all() calls actually did.
Mem0 fixed a delete_all() bug on August 1 that left most stored memories in place while telling callers the deletion succeeded, per the project's v2.0.15 release notes.
That's a compliance problem: anyone who assured a user their agent memory was deleted can't trust that answer anymore. Vector stores typically cap a single listing page around 100 entries, so larger accounts kept the overflow after a supposed full wipe.
The function listed the vector store once instead of paging through it, so it only ever saw the first page. The call still returned success regardless.
The same release also caps Supabase's search and list top_k at the vecs limit of 1000, instead of erroring like it used to. It also sets size on Elasticsearch KNN queries, which had quietly capped results at 10 hits no matter the requested top_k. All three share one shape: the return value looked fine while the underlying store did less than asked.
Mem0's notes don't say how many accounts crossed that page-size threshold before the fix landed. My bet: that number stays undisclosed, because admitting it invites the exact compliance exposure this bug created. Watch whether mem0 or any product built on it ever publishes an affected-account count.
Each link below shares sources, entities, or timing with this story.
The man who coined "vibe coding" a year ago now declares it passe and introduces "agentic engineering" — the discipline of orchestrating AI agents that plan, write, test, and ship code under structured human oversight. The timing isn't accidental. Escape.tech released the larg...
A June survey finds platforms collapsing point solutions into themselves: Stripe is now a tax engine and identity provider, Vercel ships an AI gateway, Cloudflare runs inference, Supabase competes with Pinecone on vector search, Notion is wiki plus database plus internal-tool...
| Project | Stars | What It Does | Why It Matters | |---------|-------|-------------|----------------| | Worktrunk | 2.7K | Rust CLI for Git worktrees with AI agents | Auto-squash/rebase/merge, LLM commit messages, build cache sharing. From PRQL creator. | | Timber | 545 | Com...
Wiz disclosed that Moltbook, a social network for AI agents, exposed 1.5M API authentication tokens, 35,000 email addresses, and private agent messages through a misconfigured Supabase database. The vulnerability: a Supabase API key exposed in client-side JavaScript granting f...
Security researcher @weezerOSINT demonstrated that any free Lovable account could access other users' source code, database credentials, AI chat histories, and customer data via a Broken Object Level Authorization (BOLA) flaw. Every project created before November 2025 was exp...
I've been saying for months that the missing piece in agentic coding isn't smarter models. It's that agents can't provision anything. They can write code all day but the moment they need a database, an auth provider, or a hosting account, a human has to step in, click through...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.