- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 high, 2 low
- Weekly downloads
- 333.3K
- Dependents
- 136
- Registry
- npm
Advisories 3
- CVE-2026-54327Low 2.2
Pi: Race condition in auth.json writes could expose stored credentials
Affected: from 0.28.0, through 0.73.1.
- CVE-2026-54326Low 2.5
Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass
Affected: from 0.27.5, through 0.73.1.
- CVE-2026-54328High 7.3
Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts
Affected: from 0.50.0, through 0.73.1.