Earendil-works Pi vulnerabilities
- earendil-works piPi loads project-local extensions without approval4.4 Medium
- earendil-works piPi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts7.3 High
- earendil-works piPi: Race condition in auth.json writes could expose stored credentials2.2 Low
- earendil-works piPi: Potential XSS in HTML session exports via Markdown URL sanitization bypass2.5 Low