Skip to content
OpenAdvisories

Package · npm

@grackle-ai/server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-w3hv-x4fp-6h6j

    @grackle-ai/server has Missing WebSocket Origin Header Validation

    ### Impact The WebSocket upgrade handler in the server validates authentication (API key token or session cookie) but does not check the `Origin` header. A malicious webpage on a different origin could initiate a WebSocket connection to `ws://localhost:3000/w…

    @grackle-ai/server npm