npm/baseline-browser-mapping CVE-2026-45819: medium 6.6, EPSS 0.51%

baseline-browser-mapping process termination on invalid input causes denial of service

Action: Upgrade baseline-browser-mapping to 2.11.0 or later.

npm i baseline-browser-mapping@2.11.0

Affected

Fixed versions

Sources

• osv: GHSA-w5vr-8v7q-w6rv
• nvd: CVE-2026-45819
• https://github.com/web-platform-dx/baseline-browser-mapping/pull/137
• https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
• https://github.com/web-platform-dx/baseline-browser-mapping/commit/de733e2d8959559f7bb255d5927f3afcb6f31589
• https://github.com/web-platform-dx/baseline-browser-mapping
• https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142
• https://github.com/web-platform-dx/baseline-browser-mapping/releases/tag/v2.11.0
• https://www.npmjs.com/package/baseline-browser-mapping

CVE-2026-45819 · published 2026-08-13T12:31:09Z · modified 2026-09-08T21:10:57.707771Z · JSON