@earendil-works/pi-coding-agent
Coding agent CLI with read, bash, edit, write tools and session management
Security Advisories for @earendil-works/pi-coding-agent in npm
Moderate
1 day ago
Pi Agent: Pi loads project-local extensions without approval
npm
@earendil-works/pi-coding-agent
High
1 day ago
Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts
npm
@mariozechner/pi-coding-agent, @earendil-works/pi-coding-agent
Low
1 day ago
Pi Agent: Race condition in Pi auth.json writes could expose stored credentials
npm
@earendil-works/pi-coding-agent, @mariozechner/pi-coding-agent
Low
2 days ago
Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass
npm
@earendil-works/pi-coding-agent, @mariozechner/pi-coding-agent