@grackle-ai/mcp vulnerabilities (npm)

2 vulnerabilities.

• @grackle-ai/mcp npm Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR) GHSA-f9ff-5x35-7gfw 8.7 HighJuly 2, 2026
• @grackle-ai/mcp npm @grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool GHSA-647h-p824-99w7 Fix available 8.6 HighMarch 25, 2026