{"action":"Upgrade browserslist to 4.16.5 or later.","affected":[{"fixed":"4.16.5","introduced":"4.0.0"}],"component":"browserslist","cve_ids":["CVE-2021-23364"],"ecosystem":"npm","epss":0.02383,"exploited":false,"fixed_versions":["4.16.5"],"ghsa_id":"GHSA-w8qv-6jwh-64r5","id":"tcs_01M5KGEHG7RAWRNKB5AR1S8ZJB","modified_at":"2026-09-10T03:49:05.350597377Z","published_at":"2021-05-24T19:52:40Z","references":["https://osv.dev/vulnerability/GHSA-w8qv-6jwh-64r5","https://nvd.nist.gov/vuln/detail/CVE-2021-23364","https://github.com/browserslist/browserslist/pull/593","https://github.com/browserslist/browserslist/commit/c091916910dfe0b5fd61caad96083c6709b02d98","https://github.com/browserslist/browserslist/blob/e82f32d1d4100d6bc79ea0b6b6a2d281a561e33c/index.js%23L472-L474","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1277182","https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w8qv-6jwh-64r5","url":"https://osv.dev/vulnerability/GHSA-w8qv-6jwh-64r5"}],"summary":"Regular Expression Denial of Service in browserslist"}