Suchmokuo · Node-Worker-Threads-Pool · CVE-2021-29057
**Name of the Vulnerable Software and Affected Versions**
SUCHMOKUO node-worker-threads-pool version 1.4.3
**Description**
An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool, allowing attackers to cause a denial of service. This issue can be mitigated by manually creating a timeout.
**Recommendations**
For version 1.4.3, consider creating a timeout when using the StaticPool to mitigate the risk of denial of service, for example by using the `setTimeout` method on the executor, as shown in the provided example code.