CVE-2026-45819
Received Received - Intake

Denial of Service in baseline-browser-mapping via process.exit()

Vulnerability report for CVE-2026-45819, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: seal

Description

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
baseline_browser_mapping baseline_browser_mapping to 2.11.0 (exc)
web_platform_dx baseline_browser_mapping to 2.11.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-755 The product does not handle or incorrectly handles an exceptional condition.
CWE-705 The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the baseline-browser-mapping library versions 2.x before 2.11.0. When invalid or conflicting input parameters are provided, the library calls process.exit() instead of throwing an error, causing the application to terminate immediately. This leads to a denial of service as the process stops unexpectedly.

Impact Analysis

If you use the affected versions of baseline-browser-mapping, an attacker could exploit this by providing malicious input to crash your application. This results in downtime, loss of service, and potential disruption to users relying on your application.

Mitigation Strategies

Update baseline-browser-mapping to version 2.11.0 or later to address the process.exit() issue causing denial of service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45819. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart