Mastra-Ai Mastra
2 CVEs affecting Mastra-Ai Mastra. Latest disclosed: 2026-08-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-82273 | Medium | 6.5 | 2026-08-28 | Mastra through 1.63.0 contains an authentication bypass vulnerability in the memory API thread ownership validation when mapUserToResourceId callback is omitte… |
CVE-2025-61685 | Medium | 6.5 | 2025-10-03 | Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack… |