VYPR

piscina

by Piscina

CVEs (1)

  • CVE-2026-55388HigJun 22, 2026
    risk 0.46cvss 8.1epss 0.00

    piscina is a node.js worker pool implementation. Prior to 6.0.0-rc.2, 5.2.0, and 4.9.3, piscina's constructor and run() paths read the filename option via plain member access. Both reads fall through the prototype chain when the caller's options object doesn't have filename as…