piscinajs piscina

• CVE-2026-102992 Critical 9.2 piscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env 0.5%
• CVE-2026-55388 High 8.1 piscina: Prototype Pollution Gadget → RCE via inherited options.filename 0.5%