tinypool vulnerabilities (npm)

2 vulnerabilities.

• tinypool npm Tinypool: Prototype Pollution Gadget to RCE in run() options CVE-2026-104849 Public exploitFix available 9.5 CriticalOctober 2, 2026
• tinypool npm Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution CVE-2026-104848 Fix available 9.5 CriticalOctober 2, 2026