tinylibs

Monday, October 5

• GitHub CVE-2026-104848
  Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution

  • tinylibs tinypool
  • Critical
  • CVSS 9.5
  • EPSS 0.5%
  • Fixed version listed
  22:50 UTC
• GitHub CVE-2026-104849
  Tinypool: Prototype Pollution Gadget to RCE in run() options

  • tinylibs tinypool
  • Critical
  • CVSS 9.5
  • EPSS 0.39%
  • Fixed version listed
  22:49 UTC