CVE-2026-45819 (High) detected in baseline-browser-mapping-2.10.0.tgz

[mend-bolt-for-github]

CVE-2026-45819 - High Severity Vulnerability

Vulnerable Library - baseline-browser-mapping-2.10.0.tgz

A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.

Library home page: https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.0.tgz

Sample Path to Dependency File: /package.json

Path to vulnerable library: /node_modules/baseline-browser-mapping/package.json

Dependency Hierarchy:

• muon-0.0.2-beta.64.tgz (Root Library)
  • autoprefixer-10.4.16.tgz
    • browserslist-4.28.1.tgz
      • ❌ baseline-browser-mapping-2.10.0.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Publish Date: 2026-08-13

URL: CVE-2026-45819

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2026-08-13

Fix Resolution: baseline-browser-mapping - 2.11.0

---

Step up your Open Source Security Game with Mend here