# Positive fixture for CVE-2026-49986: pinned at 3.17.0, the last affected release
# per GHSA-gvpp-v77h-5w8g. The NVD text names 3.17.1 as the fix, but that version
# was never published; 3.18.0 is the real floor.
neuro-cortex-memory==3.17.0
