{"action":"Upgrade @mastra/mcp-docs-server to 0.17.0 or later.","affected":[{"fixed":"0.17.0","introduced":"0"}],"component":"@mastra/mcp-docs-server","cve_ids":["CVE-2025-61685"],"ecosystem":"npm","epss":0.00594,"exploited":false,"fixed_versions":["0.17.0"],"ghsa_id":"GHSA-xh92-rqrq-227v","id":"tcs_01M5KGJ3GNAZNF2HSXEBD9XRE7","modified_at":"2025-10-13T15:10:27Z","published_at":"2025-09-24T20:05:15Z","references":["https://osv.dev/vulnerability/GHSA-xh92-rqrq-227v","https://github.com/mastra-ai/mastra/security/advisories/GHSA-xh92-rqrq-227v","https://nvd.nist.gov/vuln/detail/CVE-2025-61685","https://github.com/mastra-ai/mastra/commit/7f2b528ba82db512d68832d2f8ad6cbc8bb46cd4","https://github.com/mastra-ai/mastra"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-xh92-rqrq-227v","url":"https://osv.dev/vulnerability/GHSA-xh92-rqrq-227v"}],"summary":"Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure"}