{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.132.1"}],"component":"@grackle-ai/runtime-sdk","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vv65-f55v-xm6g","id":"tcs_01M5KGCZ4SYEEBEHWYAJPTN7FM","modified_at":"2026-09-10T03:51:12.203089850Z","published_at":"2026-07-02T19:16:57Z","references":["https://osv.dev/vulnerability/GHSA-vv65-f55v-xm6g","https://github.com/nick-pape/grackle/security/advisories/GHSA-vv65-f55v-xm6g","https://github.com/nick-pape/grackle"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-vv65-f55v-xm6g","url":"https://osv.dev/vulnerability/GHSA-vv65-f55v-xm6g"}],"summary":"Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)"}