{"action":"Upgrade baseline-browser-mapping to 2.11.0 or later.","affected":[{"fixed":"2.11.0","introduced":"2.0.0"}],"component":"baseline-browser-mapping","cve_ids":["CVE-2026-45819"],"ecosystem":"npm","epss":0.00507,"exploited":false,"fixed_versions":["2.11.0"],"ghsa_id":"GHSA-w5vr-8v7q-w6rv","id":"tcs_01M5KGE3BH5SN1V6E41W3DKQTH","modified_at":"2026-09-08T21:10:57.707771Z","published_at":"2026-08-13T12:31:09Z","references":["https://osv.dev/vulnerability/GHSA-w5vr-8v7q-w6rv","https://nvd.nist.gov/vuln/detail/CVE-2026-45819","https://github.com/web-platform-dx/baseline-browser-mapping/pull/137","https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519","https://github.com/web-platform-dx/baseline-browser-mapping/commit/de733e2d8959559f7bb255d5927f3afcb6f31589","https://github.com/web-platform-dx/baseline-browser-mapping","https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142","https://github.com/web-platform-dx/baseline-browser-mapping/releases/tag/v2.11.0","https://www.npmjs.com/package/baseline-browser-mapping"],"severity":{"label":"medium","score":6.6},"sources":[{"source":"osv","source_id":"GHSA-w5vr-8v7q-w6rv","url":"https://osv.dev/vulnerability/GHSA-w5vr-8v7q-w6rv"},{"source":"nvd","source_id":"CVE-2026-45819","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45819"}],"summary":"baseline-browser-mapping process termination on invalid input causes denial of service"}