DeepMyst CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM DeepMyst CVE published 2026-07-03

CVE-2026-14611

A vulnerability was found in DeepMyst Mysti up to 0.4.0, affecting the Per-Project Auto-Memory Handler's initProjectMemory function in src/managers/MemoryManager.ts. This issue allows for exposure of resources through manipulation of the workspacePath argument and can be performed remotely. Upgrading to version 0.4.0 is sufficient to address this issue, with the patch being 6d709229b5199f6769fb3cf763e5122dcc43c079.