GHSA-7q9x-8g6p-3x75
NoneCVSS
—
EPSS
—
Published
Mar 25, 2026
CISA due date
—
The record
@grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @grackle-ai/server | 0 | 0.70.1 |
Related vulnerabilities
- GHSA-8g29-8xwr-qmhr @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig… Also affects @grackle-ai/server
- GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie Also affects @grackle-ai/server
- GHSA-3mjm-x6gw-2x42 @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers Also affects @grackle-ai/server
- GHSA-w3hv-x4fp-6h6j @grackle-ai/server has Missing WebSocket Origin Header Validation Also affects @grackle-ai/server
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96361 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79