@grackle-ai/powerline vulnerabilities (npm)

2 vulnerabilities.

• @grackle-ai/powerline npm Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true) GHSA-vv65-f55v-xm6g 8.7 HighJuly 2, 2026
• @grackle-ai/powerline npm @grackle-ai/powerline Runs Without Authentication by Default GHSA-xq7h-vwjp-5vrh Fix available 6.3 MediumMarch 25, 2026