CVE-2026-55388 - piscina: Prototype Pollution Gadget → RCE via inherited options.filename
CVE ID :CVE-2026-55388 Published : June 22, 2026, 4:50 p.m. | 4 hours, 19 minutes ago Description :piscina is a node.js worker pool implementation. Prior to 6.0.0-rc.2, 5.2.0, and 4.9.3, piscina's constructor and run() paths read the filename option via plain member access. Both reads fall...