Earendil-works vulnerabilities
Products
- Pi 4
Newest
- earendil-works pi Pi loads project-local extensions without approval 4.4 Medium
- earendil-works pi Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts 7.3 High
- earendil-works pi Pi: Race condition in auth.json writes could expose stored credentials 2.2 Low
- earendil-works pi Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass 2.5 Low