PT-2026-70787

🗓️ 11 Aug 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 19 Views

Unbounded cache in Browserslist before 4.28.7 causes memory exhaustion and OOM crash via repeated queries.

Reporter	Title	Published	Views	Family All 397
IBM Security Bulletins	Security Bulletin: IBM Db2 Bridge is vulnerable due to baseline-browser-mapping, sqlparse, cryptography, Browserslist (CVE-2026-45819,CVE-2026-84305,CVE-2026-69247,CVE-2026-73088,CVE-2026-73089,CVE-2026-54284,CVE-2026-59893,CVE-2026-59894,CVE-2026-71491)	9 Sep 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in nanoid (CVE-2026-73086)	23 Sep 202609:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub	10 Sep 202610:50	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist	11 Sep 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: The Log Source Management App for IBM QRadar SIEM contains components with known vulnerabilities	24 Sep 202618:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-73088, CVE-2026-73089)	17 Sep 202612:27	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance	7 Sep 202606:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1	2 Sep 202613:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.	1 Oct 202610:46	–	ibm
Atlassian	CSRF (Cross-Site Request Forgery) nanoid Dependency in Bitbucket Data Center	2 Sep 202611:30	–	atlassian

Source	Link
suse	www.suse.com/security/cve/CVE-2026-55602
suse	www.suse.com/security/cve/CVE-2026-67313
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73089.json
bugzilla	www.bugzilla.suse.com/1275437
osv	www.osv.dev/vulnerability/GHSA-c83g-rgw3-j3cx
suse	www.suse.com/security/cve/CVE-2026-33245
suse	www.suse.com/security/cve/CVE-2025-7783
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2026-73089
suse	www.suse.com/security/cve/CVE-2026-13676
github	www.github.com/browserslist/browserslist/releases/tag/4.28.7

09 Sep 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00655

SSVC

browserslist memory exhaustion cache overflow denial of service unbounded cache