[ Vendor · 1 CVEs ]
piscinajs
CVEs affecting piscinajs published in the last 30 days, plus any piscinajs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102992 | 30 Sep 2026 | CVSS 9.2 | piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / envpiscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.options in src/index.ts as a plain… | Fix |