mastra-ai

Products

ProductCVEsExploitedLatest
mastra2–Aug 28, 2026

Exploited and recent CVEs

  • CVE-2026-82273 Medium 6.5 Mastra Memory API Thread Ownership Check Is a No-op When mapUserToResourceId Is Unset 0.5%
  • CVE-2025-61685 Medium 6.5 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure 0.6%