CVE-2026-45819CWE-705CWE-755

CVE-2026-45819

published August 13, 2026

CVSS
6.6
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

The record
Technical detail
CVSS
6.6 · NONE
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.3th percentile
Weaknesses
CWE-705 · Incorrect Control Flow Scoping; CWE-755 · Improper Handling of Exceptional Conditions
Published
2026-08-13T16:17Z
References (3)
https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142 · 22e2d327-25fe-45d7-9f0c-dcd23b7108dfhttps://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519 · 22e2d327-25fe-45d7-9f0c-dcd23b7108dfhttps://www.npmjs.com/package/baseline-browser-mapping · 22e2d327-25fe-45d7-9f0c-dcd23b7108df
EPSS history
Timeline
  • 13 AUG 11:03Z
    baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate…
    cvelistv5