baseline-browser-mapping process termination on invalid input causes denial of service

🗓️ 13 Aug 2026 12:31:09Reported by GitHub Advisory DatabaseType

baseline-browser-mapping 2.x before 2.11.0 calls process.exit on invalid input causing DoS.

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: IBM Db2 Bridge is vulnerable due to baseline-browser-mapping, sqlparse, cryptography, Browserslist (CVE-2026-45819,CVE-2026-84305,CVE-2026-69247,CVE-2026-73088,CVE-2026-73089,CVE-2026-54284,CVE-2026-59893,CVE-2026-59894,CVE-2026-71491)	9 Sep 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-45819)	17 Sep 202612:25	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Integration are vulnerable to a vulnerability in baseline-browser-mapping	11 Nov 202611:05	–	ibm
IBM Security Bulletins	Security Bulletin: : IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Sep 202606:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in baseline-browser-mapping affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	2 Nov 202614:08	–	ibm
IBM Security Bulletins	Security Bulletin: The Log Source Management App for IBM QRadar SIEM contains components with known vulnerabilities	24 Sep 202618:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	22 Sep 202609:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	9 Sep 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance	7 Sep 202606:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking	15 Oct 202614:38	–	ibm

Vulners

Node

baseline-browser-mappingRange2.0.0–2.11.0npm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-45819
github	www.github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes
github	www.github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts
npmjs	www.npmjs.com/package/baseline-browser-mapping
github	www.github.com/web-platform-dx/baseline-browser-mapping/pull/137
github	www.github.com/web-platform-dx/baseline-browser-mapping/commit/de733e2d8959559f7bb255d5927f3afcb6f31589
github	www.github.com/web-platform-dx/baseline-browser-mapping/releases/tag/v2.11.0
github	www.github.com/advisories/GHSA-w5vr-8v7q-w6rv

08 Sep 2026 20:41Current

6.8Medium risk

Vulners AI Score6.8

CVSS 48.7

EPSS0.00507

SSVC

CWE-705