GHSA-8g29-8xwr-qmhr
NoneCVSS
—
EPSS
—
Published
Mar 25, 2026
CISA due date
—
The record
@grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @grackle-ai/server | 0 | 0.70.6 |
Related vulnerabilities
- GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie Also affects @grackle-ai/server
- GHSA-3mjm-x6gw-2x42 @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers Also affects @grackle-ai/server
- GHSA-w3hv-x4fp-6h6j @grackle-ai/server has Missing WebSocket Origin Header Validation Also affects @grackle-ai/server
- GHSA-7q9x-8g6p-3x75 @grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template Also affects @grackle-ai/server
- CVE-2026-100352 kin-openapi is a Go project for handling OpenAPI files. CWE-754
- CVE-2026-98161 In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep… CWE-754
- CVE-2026-77411 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-754
- CVE-2026-87645 Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed… CWE-754