{"vulnerability": "cve-2026-104849", "sightings": [{"uuid": "52f04ea6-3d2e-424f-89f6-38cccc1dc350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2i33t7gzrilod", "content": "CVE-2026-104849 - Tinypool: Prototype Pollution Gadget to RCE in run() options\nCVE ID : CVE-2026-104849\n \n Published : Oct. 2, 2026, 4:17 p.m. | 44\u00a0minutes ago\n \n Description : Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads file...", "creation_timestamp": "2026-10-02T17:49:12.413190Z"}, {"uuid": "c7c01514-1cdf-428e-b4d9-2651fdd54266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104849", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvxonlqux2w", "content": "\ud83d\udea8 CVE-2026-104849 \u2014 CVSS 9.5 CRITICAL\n\nTinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename fr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104849\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T18:07:53.663005Z"}]}