{"id":"CVE-2026-45819","aliases":["GHSA-w5vr-8v7q-w6rv"],"url":"https://o3.security/vulnerability/CVE-2026-45819","summary":"baseline-browser-mapping process termination on invalid input causes denial of service","details":"baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.","published":"2026-08-13T11:03:42.504Z","modified":"2026-09-11T03:30:33.142726435Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"npm","name":"baseline-browser-mapping","fixedVersion":"2.11.0"}],"fix":{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519","label":"web-platform-dx/baseline-browser-mapping#137"},"references":[{"type":"WEB","url":"https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142"},{"type":"WEB","url":"https://www.npmjs.com/package/baseline-browser-mapping"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45819.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45819"},{"type":"FIX","url":"https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-11T03:30:33.142726435Z"}}