{"uuid": "f845994d-7f4a-4497-9dbc-ebd75c793ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104848", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxc4pxx5l72r", "content": "CVE-2026-104848 - tinypool\nThe tinypool library used to manage Node.js worker threads can be tricked into loading any script an attacker supplies. By adding malicious values to the default object\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tinypool #tinylibs #npm #CVE #infosec", "creation_timestamp": "2026-10-07T14:10:04.250842Z"}