GHSA-3mjm-x6gw-2x42
NoneCVSS
—
EPSS
—
Published
Mar 25, 2026
CISA due date
—
The record
@grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @grackle-ai/server | 0 | 0.70.4 |
Related vulnerabilities
- GHSA-8g29-8xwr-qmhr @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig… Also affects @grackle-ai/server
- GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie Also affects @grackle-ai/server
- GHSA-w3hv-x4fp-6h6j @grackle-ai/server has Missing WebSocket Origin Header Validation Also affects @grackle-ai/server
- GHSA-7q9x-8g6p-3x75 @grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template Also affects @grackle-ai/server
- CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. CWE-693
- CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. CWE-693
- CVE-2026-88838 A flaw was found in BusyBox's mount utility. CWE-693
- CVE-2026-101899 Axios is a promise-based HTTP client for the browser and Node.js. CWE-693