[ Vendor · 2 CVEs ]
tinylibs
CVEs affecting tinylibs published in the last 30 days, plus any tinylibs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104848 | 2 Oct 2026 | CVSS 9.5 | Tinypool: Prototype Pollution gadget in worker options leads to Remote Code ExecutionTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs ThreadPool.options from a normal options object… | Fix |
| CVE-2026-104849 | 2 Oct 2026 | CVSS 9.5 | Tinypool: Prototype Pollution Gadget to RCE in run() optionsTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename from a caller-supplied options object in… | Fix |