Improper Check for Unusual or Exceptional Conditions Affecting @grackle-ai/server package, versions <0.70.6
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-GRACKLEAISERVER-15840331
- published30 Mar 2026
- disclosed25 Mar 2026
- creditUnknown
Introduced: 25 Mar 2026
New CVE NOT AVAILABLE CWE-754 (opens in a new tab)How to fix?
Upgrade @grackle-ai/server to version 0.70.6 or higher.
Overview
@grackle-ai/server is a Grackle server orchestrator — spawns and wires core (gRPC), web-server (HTTP), MCP, and PowerLine
Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions in the JSON.parse process within the gRPC service adapter configuration handling. An attacker can cause the gRPC handler to crash by introducing malformed JSON into the database, which leads to an unhandled exception when the configuration is parsed. This is only exploitable if the database contains invalid or corrupted JSON data.
Workaround
This vulnerability can be mitigated by ensuring database integrity and regularly backing up the SQLite database.