Vendors / mastra-ai Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now mastra-ai records in CISA KEV No mastra-ai vulnerabilities are listed in CISA KEV.
Priority MEDIUM 64
Mastra through 1.63.0 contains an authentication bypass vulnerability in the memory API thread ownership validation when mapUserToResourceId callback is omitted from configuration.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00536 · Published 2026-08-28 · No fix listed CWE-862
Priority MEDIUM 62
Mastra is a Typescript framework for building AI agents and assistants.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00594 · Published 2025-10-03 · Fixed in 0.17.0 CWE-548
Open these records in search → All records by CVSS severity
0 1 1 0 0
