Repository navigation
@agentos-software/pi bundles @mariozechner/pi-coding-agent 0.60.0, affected by GHSA-jfgx-wxx8-mp94 (fixed only in @earendil-works/pi-coding-agent 0.78.1+) #2008
Description
Summary
@agentos-software/pi (checked 0.2.7 and the latest, 0.3.2) depends on and bundles @mariozechner/pi-coding-agent@0.60.0 (and @mariozechner/pi-ai@0.60.0) into dist/sdk-snapshot.js. That package line stopped at 0.73.1: Pi moved to @earendil-works/pi-coding-agent, and these advisories list no fix for the @mariozechner name:
| Advisory | Severity | Affected @mariozechner/pi-coding-agent |
Fixed |
|---|---|---|---|
| GHSA-jfgx-wxx8-mp94 (CVE-2026-54328) — predictable temporary extension install paths, local privilege escalation on shared Linux hosts | High | >= 0.50.0, <= 0.73.1 | @earendil-works/pi-coding-agent 0.78.1 |
| GHSA-7v5m-pr3q-6453 (CVE-2026-54326) — XSS in HTML session exports | Low | >= 0.27.5, <= 0.73.1 | same |
GHSA-r95r-rj6r-c39x (CVE-2026-54327) — auth.json write race |
Low | >= 0.28.0, <= 0.73.1 | same |
Downstream scanners flag every consumer, and an npm overrides entry is not a workaround: the adapter prefers the bundled snapshot (if (snapshotRuntime) in dist/adapter.js), so overriding the dependency changes only the lockfile, not what runs.
Request
Publish an @agentos-software/pi built on @earendil-works/pi-coding-agent / @earendil-works/pi-ai >= 0.78.1. Note the adapter imports internal paths (dist/core/sdk.js, session-manager.js, model-registry.js, ...) and @mariozechner/pi-agent-core; those still exist under the new package names, but the auth APIs changed (e.g. AuthStorage is no longer exported from the package root and credential operations are async).
Related: #1903.
Activity