Medium, CVSS 6.6npmPublished
baseline-browser-mapping process termination on invalid input causes denial of service
CVE-2026-45819 · GHSA-w5vr-8v7q-w6rv
- Affected
- npm baseline-browser-mapping >= 2.0.0, < 2.11.0
- Fixed in
- 2.11.0· Vendor fix available
- Issue
- baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.
Recommended action: Upgrade to 2.11.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.