Skip to content
OpenAdvisories

Vendor

piscinajs

2 known vulnerabilities.

Products

piscina 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-102992

    piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env

    piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.options in src/index.ts as a plain object that inherits from Object.prototype. Applications with a separate prototype-pollution primitive can the…

    piscinajs piscina python-tensorboard piscina Azure Linux npm