GHSA-3mjm-x6gw-2x42 @grackle-ai/server has Missing Content-Security-Policy and X-Frame-Options Headers

Not scored Published 25 Mar 2026

The server lacks security headers, reducing defense-in-depth against XSS and clickjacking, requiring an upgrade to add CSP and X-Frame-Options.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is GHSA-3mjm-x6gw-2x42?

GHSA-3mjm-x6gw-2x42 is a missing authorization vulnerability in @grackle-ai/server, published on 25 Mar 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Impact

The HTTP server does not set Content-Security-Policy, X-Frame-Options, or X-Content-Type-Options headers on any response. This reduces defense-in-depth against XSS, clickjacking, and MIME-sniffing attacks.

While the current XSS attack surface is small (React-markdown is configured safely, no dangerouslySetInnerHTML, Vite does not generate source maps), the absence of these headers means any future XSS vulnerability would have no secondary defense layer.

Affected code:

packages/server/src/index.ts — all res.writeHead() calls only set Content-Type, with no security headers

Patches

0.70.4

Fix: Add security headers to all HTML/API responses:

res.writeHead(200, {
  &#34;Content-Type&#34;: contentType,
  &#34;Content-Security-Policy&#34;: &#34;default-src &#39;self&#39;; script-src &#39;self&#39;; style-src &#39;self&#39; &#39;unsafe-inline&#39;; img-src &#39;self&#39; data:&#34;,
  &#34;X-Frame-Options&#34;: &#34;DENY&#34;,
  &#34;X-Content-Type-Options&#34;: &#34;nosniff&#34;
});

Workarounds

Use a reverse proxy (nginx, Caddy) in front of the Grackle server to inject security headers.

References

CWE-693: Protection Mechanism Failure
OWASP: HTTP Security Response Headers
File: packages/server/src/index.ts

Which versions are affected by GHSA-3mjm-x6gw-2x42?

2 open source packages ship an affected version, including @grackle-ai/server.

Package	Affected	Fixed in
`@grackle-ai/server` npm	All versions	`0.70.4`
`@grackle-ai/server` npm	All versions	`0.70.4`

How do I fix GHSA-3mjm-x6gw-2x42?

Upgrade @grackle-ai/server to 0.70.4 or later.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is GHSA-3mjm-x6gw-2x42 being exploited?

There is no known exploitation of GHSA-3mjm-x6gw-2x42 in the wild and no public exploit code.