{"data":{"id":"0429ab54-277c-4aa2-94b2-b7a249ba2c47","title":"GHSA-7v5m-pr3q-6453: Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass","summary":"Affected versions of the Pi coding agent's HTML session export did not consistently reject unsafe Markdown link and image URL schemes, and in versions with scheme filtering, C0 control characters in the scheme could bypass the check. An attacker who gets crafted Markdown into a session, for example via prompt injection, can cause script to run in the exported HTML file when a user opens it and clicks the link, risking disclosure of data embedded in that session file.","solution":"Upgrade `@earendil-works/pi-coding-agent` to version 0.78.1 or later, which sanitizes Markdown link and image URLs with an allow-list after stripping C0 control characters. Regenerate shared HTML exports after upgrading if the underlying sessions contained untrusted content. Users of the old `@mariozechner/pi-coding-agent` scope should migrate to the new package, since no patched release exists under that scope.","labels":["security","safety"],"sourceUrl":"https://github.com/advisories/GHSA-7v5m-pr3q-6453","publishedAt":"2026-06-16T23:43:15.000Z","cveId":"CVE-2026-54326","cweIds":null,"cvssScore":null,"cvssSeverity":"low","severity":"low","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["@earendil-works/pi-coding-agent@>= 0.74.0, < 0.78.1 (fixed: 0.78.1)","@mariozechner/pi-coding-agent@>= 0.27.5, <= 0.73.1"],"affectedPackageNames":["@earendil-works/pi-coding-agent","@mariozechner/pi-coding-agent"],"affectedPackageRefs":["npm:@mariozechner/pi-coding-agent","npm:@earendil-works/pi-coding-agent"],"affectedVendors":[],"affectedVendorsRaw":["Pi Agent","@earendil-works/pi-coding-agent","@mariozechner/pi-coding-agent"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00172,"epssCheckedAt":"2026-11-04T18:09:13.116Z","kevDateAdded":null,"advisoryAliases":["GHSA-7v5m-pr3q-6453"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T23:43:15.000Z","fixReleasedAt":"2026-06-04T16:35:48.944Z","daysToFix":-12,"fixCheckedAt":"2026-10-29T21:34:24.914Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"@earendil-works/pi-coding-agent","fixedVersion":"0.78.1","matchedVersion":"0.78.1","fixReleasedAt":"2026-06-04T16:35:48.944Z","daysToFix":-12,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:24.767Z"}]}}