https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:58:57 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54328 <p><strong>Affected:</strong> earendil-works pi</p> <p>Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary directory could prepare the expected package location before another user runs pi with a temporary extension package source. Pi could then load attacker-controlled extension code in the victim user&#39;s process. This vulnerability is fixed in 0.78.1.</p> <p><strong>Affected:</strong> earendil-works pi</p> <p>Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating system temporary directory. On Linux-based multi-user systems, a local attacker who can write to the shared temporary directory could prepare the expected package location before another user runs pi with a temporary extension package source. Pi could then load attacker-controlled extension code in the victim user&#39;s process. This vulnerability is fixed in 0.78.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-54328