Skip to content
OpenAdvisories

Vendor

badlogic

3 known vulnerabilities.

Products

pi-mono 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-5557

    badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass

    A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The a…

    badlogic pi-mono
  • Medium 6.3
    CVE-2026-5556 Public exploit

    badlogic pi-mono loader.ts discoverAndLoadExtensions code injection

    A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote ex…

    badlogic pi-mono
  • Medium 4.3
    CVE-2026-5533

    badlogic pi-mono SVG Artifact SvgArtifact.ts cross site scripting

    A vulnerability was determined in badlogic pi-mono 0.58.4. The impacted element is an unknown function of the file packages/web-ui/src/tools/artifacts/SvgArtifact.ts of the component SVG Artifact Handler. This manipulation causes cross site scripting. Remote …

    badlogic pi-mono