@grackle-ai/plugin-core vulnerabilities

CVEs whose affected-version data names the @grackle-ai/plugin-core package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-f9ff-5x35-7gfwHigh

Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)

▾ Twilightgrackle-ai · @grackle-ai/mcpvia GHSA

@grackle-ai/plugin-core vulnerabilities (CVEs) · VulnSea