GHSA-5j35-xr4g-vwf4 @grackle-ai/server has a Missing Secure Flag on Session Cookie

Not scored Published 25 Mar 2026

Attackers can intercept session cookies over HTTP when the server is exposed to the network, potentially leading to account takeover.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is GHSA-5j35-xr4g-vwf4?

GHSA-5j35-xr4g-vwf4 is a vulnerability in @grackle-ai/server, published on 25 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Impact

The session cookie is set with HttpOnly; SameSite=Lax; Path=/ but does not include the Secure flag. This means the cookie will be sent over plain HTTP connections.

Since the server binds to 127.0.0.1 by default and uses HTTP (not HTTPS), this is acceptable for localhost use. However, when --allow-network is used to bind to 0.0.0.0, cookies could be transmitted over insecure network connections and intercepted by an attacker.

Affected code:

packages/server/src/session.ts:76 — cookie string lacks ; Secure attribute

Patches

0.70.5

Fix: Conditionally add ; Secure when served over HTTPS or when --allow-network is enabled:

const securePart = isHttps ? &#34;; Secure&#34; : &#34;&#34;;
return `${SESSION_COOKIE_NAME}=${cookieValue}; HttpOnly; SameSite=Lax; Path=/${securePart}; Max-Age=${maxAge}`;

Workarounds

Do not use --allow-network over untrusted networks without a TLS-terminating reverse proxy.

Resources

OWASP: Secure Cookie Attribute
File: packages/server/src/session.ts

Which versions are affected by GHSA-5j35-xr4g-vwf4?

2 open source packages ship an affected version, including @grackle-ai/server.

Package	Affected	Fixed in
`@grackle-ai/server` npm	All versions	`0.70.5`
`@grackle-ai/server` npm	All versions	`0.70.5`

How do I fix GHSA-5j35-xr4g-vwf4?

Upgrade @grackle-ai/server to 0.70.5 or later.

Is GHSA-5j35-xr4g-vwf4 being exploited?

There is no known exploitation of GHSA-5j35-xr4g-vwf4 in the wild and no public exploit code.