CVE-2026-45819
Received Received - Intake

Denial of Service in baseline-browser-mapping via process.exit()

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: seal

Description
baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-09-02
AI Q&A
2026-08-13
EPSS Evaluated
2026-09-01
NVD
CVE-2026-45819
EUVD
EUVD-2026-57788

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
baseline_browser_mapping baseline_browser_mapping to 2.11.0 (exc)
web_platform_dx baseline_browser_mapping to 2.11.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-755 The product does not handle or incorrectly handles an exceptional condition.
CWE-705 The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the baseline-browser-mapping library versions 2.x before 2.11.0. When invalid or conflicting input parameters are provided, the library calls process.exit() instead of throwing an error, causing the application to terminate immediately. This leads to a denial of service as the process stops unexpectedly.

Detection Guidance

This vulnerability can be detected by checking the version of baseline-browser-mapping installed. If the version is below 2.11.0, the system is vulnerable. Commands like 'npm list baseline-browser-mapping' or 'grep baseline-browser-mapping package.json' can help identify the installed version.

Impact Analysis

If you use the affected versions of baseline-browser-mapping, an attacker could exploit this by providing malicious input to crash your application. This results in downtime, loss of service, and potential disruption to users relying on your application.

Compliance Impact

This vulnerability causes denial of service by terminating processes unexpectedly, which could disrupt services handling sensitive data. However, the provided text does not specify impacts on GDPR or HIPAA compliance directly.

Mitigation Strategies

Update baseline-browser-mapping to version 2.11.0 or later to address the process.exit() issue causing denial of service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45819. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart