pi-coding-agent-1.0.2-1.1 on GA media (moderate)

pi-coding-agent-1.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:12062-1 Rating: moderate Cross-References: CVE-2026-102276 CVSS scores: CVE-2026-102276 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

OPENSUSE-SU-2026:22111-1 Security update for pi-coding-agent

This update for pi-coding-agent fixes the following issues: Changes in pi-coding-agent: - Update to version 1.0.4 1.0.3 was superseded the same day and never submitted: BREAKING: provider azure-openai-responses renamed to azure, now also serving Azure Foundry Chat Completions azure/deepseek-v4-pr...

pi-coding-agent-1.0.0-1.1 on GA media (moderate)

pi-coding-agent-1.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11967-1 Rating: moderate Cross-References: CVE-2026-102277 CVE-2026-102278 CVSS scores: CVE-2026-102277 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-102277 SUSE : 6.9...

OPENSUSE-SU-2026:12062-1 pi-coding-agent-1.0.2-1.1 on GA media

These are all security issues fixed in the pi-coding-agent-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105676

These are all security issues fixed in the pi-coding-agent-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11967-1 pi-coding-agent-1.0.0-1.1 on GA media

These are all security issues fixed in the pi-coding-agent-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

pi-coding-agent-0.87.1-1.1 on GA media (moderate)

pi-coding-agent-0.87.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11884-1 Rating: moderate Cross-References: CVE-2026-84933 CVE-2026-84947 CVE-2026-84961 CVSS scores: CVE-2026-84933 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2026-84933 SUSE : 8.3...

OPENSUSE-SU-2026:11884-1 pi-coding-agent-0.87.1-1.1 on GA media

These are all security issues fixed in the pi-coding-agent-0.87.1-1.1 package on the GA media of openSUSE Tumbleweed...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54326 via @mariozechner/pi-coding-agent (>=0.18.8, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.18.8, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.18.3, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54326 Source advisory:...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@agentai2027/openclaw-zh (>=2026.5.2-zh, <=2026.5.7-zh), @cdogclaw/openclaw (2026.4.14) +40 more potentially affected by CVE-2026-54327 via @mariozechner/pi-coding-agent (>=0.18.8, <=0.73.0)

@mariozechner/pi-coding-agent NPM version =0.18.8, =2026.5.2-zh, =0.8.7, =2026.5.5-cmg.1, =2.2.4, =4.0.0, =2026.4.10-8, =0.1.0-next.27, =0.1.91, =0.18.3, =2026.4.5-nightly.202604080005, =1.0.0, =0.2.0, =0.0.0-main.4994268, =2.3.9 and more Source cves: CVE-2026-54327 Source advisory:...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54326 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +157 more potentially affected by CVE-2026-54328 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +191 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =0.1.1, =0.3.0, =1.0.0-beta.10, =0.2.0...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +191 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =0.1.1, =0.3.0, =1.0.0-beta.10, =0.2.0...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +191 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =0.1.1, =0.3.0, =1.0.0-beta.10, =0.2.0...

@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +191 more potentially affected by CVE-2026-54325 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.1)

@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =0.1.1, =0.3.0, =1.0.0-beta.10, =0.2.0...

Unsafe Dependency Resolution

Overview @earendil-works/pi-coding-agent is a Coding agent CLI with read, bash, edit, write tools and session management Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the project resource loading process. An attacker can execute arbitrary code with the same...