CVE-2026-45819

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

CVSS

No CVSS.

References

Link	Resource
https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142
https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
https://www.npmjs.com/package/baseline-browser-mapping

Configurations

No configuration.

History

23 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) baseline-browser-mapping 2.x anterior a 2.11.0 llama a process.exit() en lugar de lanzar una excepción ante parámetros de entrada inválidos o conflictivos, y puede desencadenar la terminación inmediata del proceso, causando denegación de servicio.

Information

Published : 2026-08-13 12:17

Updated : 2026-10-23 19:10

NVD link : CVE-2026-45819

Mitre link : CVE-2026-45819

CVE.ORG link : CVE-2026-45819

JSON object : View

Products Affected

No product.

CWE

CWE-705

Incorrect Control Flow Scoping

CWE-755

Improper Handling of Exceptional Conditions

{"id": "CVE-2026-45819", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45819", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T14:45:42.399559Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df", "cvssData": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "USER", "baseScore": 6.6, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df", "affectedData": [{"vendor": "web-platform-dx", "product": "baseline-browser-mapping", "versions": [{"status": "affected", "version": "2.0.0", "lessThan": "2.11.0", "versionType": "semver"}], "platforms": ["Linux", "macOS", "Windows"], "defaultStatus": "unaffected"}]}], "published": "2026-08-13T12:17:23.383", "references": [{"url": "https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142", "source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df"}, {"url": "https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519", "source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df"}, {"url": "https://www.npmjs.com/package/baseline-browser-mapping", "source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "22e2d327-25fe-45d7-9f0c-dcd23b7108df", "description": [{"lang": "en", "value": "CWE-705"}, {"lang": "en", "value": "CWE-755"}]}], "descriptions": [{"lang": "en", "value": "baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service."}, {"lang": "es", "value": "baseline-browser-mapping 2.x anterior a 2.11.0 llama a process.exit() en lugar de lanzar una excepci\u00f3n ante par\u00e1metros de entrada inv\u00e1lidos o conflictivos, y puede desencadenar la terminaci\u00f3n inmediata del proceso, causando denegaci\u00f3n de servicio."}], "lastModified": "2026-10-23T19:10:00.167", "sourceIdentifier": "22e2d327-25fe-45d7-9f0c-dcd23b7108df"}