Nextjs had remote code execution vulnerabilities because of how they implemented react server side. I am not touching an AI version without waiting for a while.
Thank you. This is the part that shocks me the most. I was always wary of Next.js for this exact reason (in fact, I refused to use it for personal projects before the RCE because I was scared that I would make a mistake and leak server-side data to the client.
Bugs like this are easy to happen and even easier to miss if you’re generating thousands of lines of code with AI.
It was a vulnerability that only could exist due to the incestuous relationship between React and Vercel. It was something Vercel has been trying to heavily push into React for years (which is why they hired previous react core team members).
This is not enough information for someone new to MCP / agents to start the course. What you actually need to point out, is that users need to type "startMastraCourse" into their IDE's agent mode to actually start the course.
I'm brand new to MCP and agents but was able to read the extra docs to get VSCode set up with Mastra. Then what? I only figured out the "start Mastra Course" because of their tweet where they show someone typing that into co-pilot.
There really needs to be more hand holding to get someone to the point where the course actually starts. From there I've been able to follow along alright, but it was a real battle to get to this point.
Yes, the issues were fixed ~1-2 weeks after release. It's a good "all-rounder" model, best compared to 4o. Good multilingual capabilities, even in languages not specifically highlighted. Fast to run inference on it. Code is not one of its strong suits at all.
Hello Joe, thanks a lot for hydra and pg_duckdb. I wanted to confirm that for self hosting hydra i have to generate a token from your platform? what data is shared with hydra for this case. We need to double check as our data has restriction of sharing.
Hello thawab, yes! you can self-host Hydra with a token from the platform. Sign-up and visit that URL to take you to the right spot. We call it Bare Metal deployment, here's 1 minute setup guide (https://docs.hydra.so/guides/bare_metal)
billing (usage) metrics so we know what to charge. We offer BYOC 'Bare Metal' deployments as part of the Business plan. You can set it up now, but we offer volume discounts so you should talk to our team directly. Feel free to DM me on X (@JoeSciarrino) or email founders@