Skip to content
OpenAdvisories

Package · npm

@grackle-ai/server

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-3mjm-x6gw-2x42

    @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers

    ### Impact The HTTP server does not set `Content-Security-Policy`, `X-Frame-Options`, or `X-Content-Type-Options` headers on any response. This reduces defense-in-depth against XSS, clickjacking, and MIME-sniffing attacks. While the current XSS attack surface…

    @grackle-ai/server npm