MEDIUMnpm
GHSA-3mjm-x6gw-2x42@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers
Modified: 3/25/2026
package
npm/@grackle-ai/server
pkg:npm/%40grackle-ai/server
LOWnpm
GHSA-5j35-xr4g-vwf4@grackle-ai/server has a Missing Secure Flag on Session Cookie
Modified: 3/25/2026
LOWnpm
GHSA-7q9x-8g6p-3x75@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template
Modified: 3/25/2026
LOWnpm
GHSA-8g29-8xwr-qmhr@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling
Modified: 3/25/2026
HIGHnpm
GHSA-w3hv-x4fp-6h6j@grackle-ai/server has Missing WebSocket Origin Header Validation
Modified: 3/25/2026