{"action":"Upgrade @grackle-ai/powerline to 0.70.1 or later.","affected":[{"fixed":"0.70.1","introduced":"0"}],"component":"@grackle-ai/powerline","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.70.1"],"ghsa_id":"GHSA-xq7h-vwjp-5vrh","id":"tcs_01M5KGJKA4HH2J1YWWPA9BZFQM","modified_at":"2026-03-25T17:46:26.776834Z","published_at":"2026-03-25T17:30:46Z","references":["https://osv.dev/vulnerability/GHSA-xq7h-vwjp-5vrh","https://github.com/nick-pape/grackle/security/advisories/GHSA-xq7h-vwjp-5vrh","https://github.com/nick-pape/grackle"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xq7h-vwjp-5vrh","url":"https://osv.dev/vulnerability/GHSA-xq7h-vwjp-5vrh"}],"summary":"@grackle-ai/powerline Runs Without Authentication by Default"}