Browse all 4 CVE security advisories affecting earendil-works. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54327 | Pi: Race condition in auth.json writes could expose stored credentials — pi CWE-367 | 2.2 | Low | 2026-06-23 |
| CVE-2026-54326 | Pi: Potential XSS in HTML session exports via Markdown URL sanitization bypass — pi CWE-79 | 2.5 | Low | 2026-06-23 |
| CVE-2026-54328 | Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hosts — pi CWE-379 | 7.3 | High | 2026-06-23 |
| CVE-2026-54325 | Pi loads project-local extensions without approval — pi CWE-829 | 4.4 | Medium | 2026-06-23 |
This page lists every published CVE security advisory associated with earendil-works. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.