mastra-ai mastra

• CVE-2026-82273 Medium 6.5 Mastra Memory API Thread Ownership Check Is a No-op When mapUserToResourceId Is Unset 0.5%
• CVE-2025-61685 Medium 6.5 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure 0.6%