@earendil-works/pi-coding-agent
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pi Agent: Race condition in Pi auth.json writes could expose stored credentials | @earendil-works/pi-coding-agent@mariozechner/pi-coding-agent | npm | Low | Fix reported | |
| Pi Agent: Pi loads project-local extensions without approval | @earendil-works/pi-coding-agent | npm | Medium | Fix reported | |
| Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts | @earendil-works/pi-coding-agent@mariozechner/pi-coding-agent | npm | High | Fix reported | |
| Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass | @earendil-works/pi-coding-agent@mariozechner/pi-coding-agent | npm | Low | Fix reported |