@grackle-ai/mcp
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR) | @grackle-ai/auth@grackle-ai/mcp | npm | High | No fix reported | |
| @grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool | @grackle-ai/mcp | npm | High | Fix reported |