@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.28.0, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.28.0, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54327 Source advisory:...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.28.0, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.28.0, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.28.0, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54327 Source advisory:...

PT-2026-50493

Name of the Vulnerable Software and Affected Versions @mariozechner/pi-coding-agent versions 0.28.0 through 0.73.1 @earendil-works/pi-coding-agent versions 0.74.0 through 0.78.0 Description A race condition in the file write path of the credential storage implementation allows the auth.json file,...

GHSA-7V5M-PR3Q-6453 Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

Potential XSS in HTML session exports via Markdown URL handling Pi HTML exports render session Markdown into a static HTML file. Affected versions did not consistently reject unsafe Markdown link and image URL schemes. In versions with scheme filtering, C0 control characters in the URL scheme cou...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.27.9, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.27.9, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.27.0, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54326 Source advisory:...

Pi Agent: Potential XSS in HTML session exports via Markdown URL sanitization bypass

Potential XSS in HTML session exports via Markdown URL handling Pi HTML exports render session Markdown into a static HTML file. Affected versions did not consistently reject unsafe Markdown link and image URL schemes. In versions with scheme filtering, C0 control characters in the URL scheme cou...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.27.9, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.27.9, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.27.0, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54326 Source advisory:...

openshell-sandbox-poc

OpenShell + Kata Containers: Dual-Protection PoC A proof-of-c...

CVE-2026-28353: Embedded Malicious Code

Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities. In Trivy VSCode Extension version 1.8.12, which was distributed via OpenVSX marketplace was compromised and contained malicious code designed to leverage local AI coding agent to collect and exfiltrate sensitive...

EUVD-2025-198528

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error in validation it was possible for Roo to automatically execute commands that did not match the allow list prefixes. This issue has been patched in version 3.26.7...

PT-2025-47816

Name of the Vulnerable Software and Affected Versions Roo Code versions prior to 3.26.7 Description Roo Code, an AI-powered autonomous coding agent, had a validation error that allowed it to automatically execute commands not on the approved list of prefixes. This occurred in versions before...

EUVD-2025-20299

Malicious code in bioql PyPI...

EUVD-2025-22473

Malicious code in bioql PyPI...

EUVD-2025-19434

Malicious code in bioql PyPI...

Kicking off Cybersecurity Awareness Month 2025: Researcher spotlights and enhanced incentives

October marks Cybersecurity Awareness Month, a time when the developer community reflect on the importance of security in the evolving digital landscape. At GitHub, we understand that protecting the global software ecosystem relies on the commitment, skill, and ingenuity of the security research...

PT-2025-30619 · Robocode · Robocode

Name of the Vulnerable Software and Affected Versions: Roo Code versions 3.23.18 and below Description: Roo Code, an AI-powered autonomous coding agent, does not validate line breaks in its command input. This bypasses the allow-list mechanism due to a lack of parsing or validation logic,...

CVE-2025-53536

Roo Code is an AI-powered autonomous coding agent. Prior to 3.22.6, if the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code settings files and trigger code execution. There were multiple ways to achieve that. One example is with...