@stackflag.bsky.socialCVE-2026-104849 - tinypool
The tinypool library used in Node.js projects contained a flaw that could allow an attacker to execute code with the same rights as the application. This matters because it…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-104848 - tinypool
The tinypool library used to manage Node.js worker threads can be tricked into loading any script an attacker supplies. By adding malicious values to the default object…
Too many irrelevant or confusing CVEs? Use stackflag.com