LOW2.5npm
GHSA-7v5m-pr3q-6453· CVE-2026-54326Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass
Modified: 7/20/2026
package
pkg:npm/%40mariozechner/pi-coding-agent
Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass
Modified: 7/20/2026
Pi Agent: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts
Modified: 7/20/2026
Pi Agent: Race condition in Pi auth.json writes could expose stored credentials
Modified: 7/20/2026