What’s Vulnerable › Products

earendil-works pi vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your earendil-works pi version is affected

Latest earendil-works pi vulnerabilities

• CVE-2026-54328 — Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts (CVSS 7.3)
• CVE-2026-54327 — Pi: Race condition in auth.json writes could expose stored credentials (CVSS 2.2)
• CVE-2026-54326 — Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass (CVSS 2.5)
• CVE-2026-54325 — Pi loads project-local extensions without approval (CVSS 4.4)