CVE-2026-45819
CVE-2026-45819 is a medium-severity vulnerability with a CVSS 4.0 base score of 6.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-705.
Key facts
- Severity: Medium (CVSS 4.0 base score 6.6)
- EPSS exploit prediction: 0% (31st percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-705
- Published:
- Last modified:
Description
baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.
Frequently asked questions
- What is CVE-2026-45819?
- baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.
- How severe is CVE-2026-45819?
- CVE-2026-45819 has a CVSS 4.0 base score of 6.6, rated medium severity.
- Is CVE-2026-45819 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-45819?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-45819 published?
- CVE-2026-45819 was published on 2026-08-13.
References
- https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142
- https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
- https://www.npmjs.com/package/baseline-browser-mapping
Other CWE-705 vulnerabilities
- CVE-2025-53856 — High (CVSS 7.5): When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object…
- CVE-2024-45433 — Medium (CVSS 6.5): OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the…
- CVE-2026-40208 — Low (CVSS 3.7): An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA…
- CVE-2026-3449 — Low (CVSS 3.3): Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise…