Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-45819: baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting

39
Routine
MEDIUM 6.6REMOTE

CVE-2026-45819 is a medium-severity flaw (CVSS 6.6) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Why this priority

  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score6.6 (Medium)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance0.5% (top 58%)
CISA exploited listNo
WeaknessCWE-705, CWE-755
Published2026-08-13
Last modified2026-10-23
Publisher (CNA): seal

Last updated 2026-10-23 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Timeline

Exact fixes by distribution

npm · baseline-browser-mapping · FIXED · 2.11.0 · vulnerable: >= 2.0.0, < 2.11.0 · source
npm install baseline-browser-mapping@">=2.11.0" npm ls baseline-browser-mapping
Fedora ELN · ntpd-rs · FIXED · 1.7.2-3.eln159 · FEDORA-2026-57e4a99310 · source
sudo dnf upgrade --advisory=FEDORA-2026-57e4a99310
Fedora 46 · moby-engine · FIXED · 29.9.2-2.fc46 · FEDORA-2026-4856be87b3 · source
sudo dnf upgrade --advisory=FEDORA-2026-4856be87b3
RHEL 10 · rust · NOT AFFECTED
RHEL 8 · dotnet8.0 · NOT AFFECTED
RHEL 9 · rust · NOT AFFECTED
RHEL AI (RHEL AI) 3 · rust · NO FIX YET
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-45819?

No fixed release is listed yet. Watch the vendor advisory and apply any mitigation shown on this page.

Is CVE-2026-45819 being exploited?

CVE-2026-45819 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-45819 affect?

CVE-2026-45819 affects affected software. Severity is medium (CVSS 6.6). baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

How urgent is CVE-2026-45819?

Priority 39/100. Remotely exploitable, no login, no user action

References

← Back to latest CVEs