Skip to content
OpenAdvisories

Package · npm

@mastra/mcp-docs-server

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2025-61685

    Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

    Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent …

    mastra-ai mastra @mastra/mcp-docs-server npm