CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Score

CVSS 4.0 6.6 Medium

Status

Deferred - 22e2d327-25fe-45d7-9f0c-dcd23b7108df

Published

2026-08-13

Last modified

2026-10-23

Weaknesses

CWE-705, CWE-755

Affected products

• Baseline-browser-mapping (Web-platform-dx)

References

• https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#…
• https://www.npmjs.com/package/baseline-browser-mapping
• https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25…