piscinajs

Thursday, October 1

• GitHub CVE-2026-102992
  piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

  • piscinajs piscina
  • Critical
  • CVSS 9.2
  • EPSS 0.43%
  • Fixed version listed
  15:03 UTC