@grackle-ai/powerline
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true) | @grackle-ai/powerline@grackle-ai/runtime-sdk | npm | High | No fix reported | |
| @grackle-ai/powerline Runs Without Authentication by Default | @grackle-ai/powerline | npm | Medium | Fix reported |