Skip to content

@grackle-ai/plugin-core vulnerabilities (npm)

1 vulnerability.

@grackle-ai/plugin-core npmGrackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR)GHSA-f9ff-5x35-7gfw8.7 HighJuly 2, 2026