@mariozechner/pi-coding-agent vulnerabilities (npm)

3 vulnerabilities.

• @mariozechner/pi-coding-agent npm Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts CVE-2026-54328 Fix available 7.3 HighJune 17, 2026
• @mariozechner/pi-coding-agent npm Pi: Race condition in auth.json writes could expose stored credentials CVE-2026-54327 Fix available 2.2 LowJune 17, 2026
• @mariozechner/pi-coding-agent npm Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass CVE-2026-54326 Fix available 2.5 LowJune 16, 2026