Skip to content

@grackle-ai/runtime-sdk vulnerabilities (npm)

1 vulnerability.

@grackle-ai/runtime-sdk npmGrackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)GHSA-vv65-f55v-xm6g8.7 HighJuly 2, 2026