GHSA-w3hv-x4fp-6h6j
NoneCVSS
—
EPSS
—
Published
Mar 25, 2026
CISA due date
—
The record
@grackle-ai/server has Missing WebSocket Origin Header Validation
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @grackle-ai/server | 0 | 0.70.3 |
Related vulnerabilities
- GHSA-8g29-8xwr-qmhr @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig… Also affects @grackle-ai/server
- GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie Also affects @grackle-ai/server
- GHSA-3mjm-x6gw-2x42 @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers Also affects @grackle-ai/server
- GHSA-7q9x-8g6p-3x75 @grackle-ai/server: Unescaped Error String in renderPairingPage() HTML Template Also affects @grackle-ai/server
- CVE-2026-114125 Storybook is a frontend workshop for building user interface components and pages in… CWE-346
- CVE-2026-107230 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-346
- CVE-2026-94485 Next.js is a React framework for building full-stack web applications. CWE-346
- CVE-2026-94486 Next.js is a React framework for building full-stack web applications. CWE-346