See the full list of npm packages affected by the "Mastra Supply Chain Compromise - June 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects @mastra/agentcore | Versions =0.2.2
Has fix
npmPublished 17 Jun 2026
Affects @mastra/agent-builder | Versions =1.0.42
Has fix
npmPublished 17 Jun 2026
Affects @mastra/agent-browser | Versions =0.3.2
Has fix
npmPublished 17 Jun 2026
- M
Improper Check for Unusual or Exceptional ConditionsCVE-2026-54269
Affects protobufjs-cli | Versions <1.3.3>=2.0.0 <2.5.1
Has fix
npmPublished 17 Jun 2026
- M
Improper Check for Unusual or Exceptional ConditionsCVE-2026-54269
Affects protobufjs | Versions <7.6.3>=8.0.0 <8.6.0
Has fix
npmPublished 17 Jun 2026
- M
External Control of File Name or PathCVE-2026-53632
Affects launch-editor | Versions <2.14.1
Has fix
npmPublished 16 Jun 2026
Affects terminal-pretty-logger | Versions *
No fix available
npmPublished 16 Jun 2026
Affects terminal-structured-logger | Versions *
No fix available
npmPublished 16 Jun 2026
Affects sp-api-dev-assistant-mcp-server | Versions *
No fix available
npmPublished 16 Jun 2026