Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/03 10:37 p.m.6 views

CVE-2025-61685 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file...

6.5CVSS6.5AI score0.00541EPSS
SaveExploits0References4
Rows per page
Query Builder