npm/@grackle-ai/mcp: high
@grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool
Action: Upgrade @grackle-ai/mcp to 0.70.2 or later.
npm i @grackle-ai/mcp@0.70.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.70.2 | - |
Fixed versions
| 0.70.2 |
Sources
- osv: GHSA-647h-p824-99w7
- https://github.com/nick-pape/grackle/security/advisories/GHSA-647h-p824-99w7
- https://github.com/nick-pape/grackle
published · modified · JSON