@earendil-works/pi-coding-agent vulnerabilities (npm)
4 vulnerabilities.
-
@earendil-works/pi-coding-agentnpm Pi loads project-local extensions without approval 4.4 Medium -
@earendil-works/pi-coding-agentnpm Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts 7.3 High -
@earendil-works/pi-coding-agentnpm Pi: Race condition in auth.json writes could expose stored credentials 2.2 Low -
@earendil-works/pi-coding-agentnpm Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass 2.5 Low