{"id":"CVE-2026-45819","title":"baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.","summary":"baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-705","CWE-755","CWE-617"],"vendor":"Red Hat","product":"Red Hat Ceph Storage 9","affected":["openshift_lightspeed","openshift_pipelines","ansible_automation_platform 2","build_of_podman_desktop","ceph_storage 9","discovery 2","edge_manager 1","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai","openshift_container_platform 4","openshift_data_foundation 4","openshift_dev_spaces","satellite 6","secrets_management_console_for_red_hat_openshift","self_service_automation_portal 2","hardened_images","openshift_ai 2.25"],"patched":["hardened_images","openshift_ai 2.25"],"published":"2026-08-13","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:52:04.827","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45819","references":[{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142","label":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519","label":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"url":"https://www.npmjs.com/package/baseline-browser-mapping","label":"22e2d327-25fe-45d7-9f0c-dcd23b7108df"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45819.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-45819"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515240"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-45819"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45819"},{"url":"https://access.redhat.com/errata/RHSA-2026:54518"},{"url":"https://access.redhat.com/errata/RHSA-2026:54517"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126"},{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/pull/137"},{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/commit/de733e2d8959559f7bb255d5927f3afcb6f31589"},{"url":"https://github.com/web-platform-dx/baseline-browser-mapping/releases/tag/v2.11.0"},{"url":"https://github.com/advisories/GHSA-w5vr-8v7q-w6rv"},{"url":"https://access.redhat.com/errata/RHSA-2026:68044"},{"url":"https://access.redhat.com/errata/RHSA-2026:68253"},{"url":"https://access.redhat.com/errata/RHSA-2026:68006"},{"url":"https://access.redhat.com/errata/RHSA-2026:68254"},{"url":"https://access.redhat.com/errata/RHSA-2026:68754"},{"url":"https://access.redhat.com/errata/RHSA-2026:68765"},{"url":"https://access.redhat.com/errata/RHSA-2026:68755"}],"tags":["nvd","csaf","vex","red-hat","ghsa","npm"],"epss":0.00372,"epssPercentile":0.3093,"aliases":["GHSA-w5vr-8v7q-w6rv"],"ecosystem":"npm","cvssSource":"vendor","ingestedAt":"2026-09-08T21:11:12.322Z","slug":"CVE-2026-45819","body":"## Overview\n\nbaseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-45819)\n\nAffected packages:\n\n- `baseline-browser-mapping >= 2.0.0, < 2.11.0`\n\nPatched in:\n\n- `baseline-browser-mapping 2.11.0`\n\nSource: https://github.com/advisories/GHSA-w5vr-8v7q-w6rv\n\n## Vendor advisories\n\n- **RHSA-2026:54518** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:54518)\n- **RHSA-2026:54517** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:54517)\n- **RHSA-2026:65126** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-09-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:65126)\n- **Red Hat VEX** · Important · affected: OpenShift Lightspeed, OpenShift Pipelines, Red Hat Ansible Automation Platform 2, Red Hat Build of Podman Desktop, Red Hat Ceph Storage 9, Red Hat Discovery 2, … · no fix planned: Red Hat Ansible Automation Platform 2, Secrets Management Console for Red Hat OpenShift, OpenShift Lightspeed, OpenShift Pipelines, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45819.json)\n- **RHSA-2026:68044** · Red Hat · fixed in: Red Hat Edge Manager 1.1 · released 2026-09-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:68044)\n- **RHSA-2026:68253** · Red Hat · fixed in: Red Hat Edge Manager 1.1 · released 2026-09-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:68253)\n- **RHSA-2026:68006** · Red Hat · fixed in: Red Hat Edge Manager 1.2 · released 2026-09-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:68006)\n- **RHSA-2026:68254** · Red Hat · fixed in: Red Hat Edge Manager 1.2 · released 2026-09-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:68254)\n- **RHSA-2026:68754** · Red Hat · fixed in: Red Hat OpenShift Dev Spaces 3.30 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68754)\n- **RHSA-2026:68765** · Red Hat · fixed in: Red Hat Satellite 6.18 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68765)\n- **RHSA-2026:68755** · Red Hat · fixed in: Red Hat Satellite 6.19 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68755)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201686,"id":"CVE-2026-45819","ts":1789399606070,"field":"cvss","old":null,"new":"7.5"},{"seq":201685,"id":"CVE-2026-45819","ts":1789399606070,"field":"severity","old":"medium","new":"high"},{"seq":200418,"id":"CVE-2026-45819","ts":1789397216646,"field":"cvss","old":"7.5","new":null},{"seq":200417,"id":"CVE-2026-45819","ts":1789397216646,"field":"severity","old":"high","new":"medium"},{"seq":198342,"id":"CVE-2026-45819","ts":1789391854935,"field":"cvss","old":null,"new":"7.5"},{"seq":198341,"id":"CVE-2026-45819","ts":1789391854935,"field":"severity","old":"medium","new":"high"},{"seq":196135,"id":"CVE-2026-45819","ts":1789383492213,"field":"cvss","old":"7.5","new":null},{"seq":196134,"id":"CVE-2026-45819","ts":1789383492213,"field":"severity","old":"high","new":"medium"},{"seq":195064,"id":"CVE-2026-45819","ts":1789380375254,"field":"cvss","old":null,"new":"7.5"},{"seq":195063,"id":"CVE-2026-45819","ts":1789380375254,"field":"severity","old":"medium","new":"high"},{"seq":193851,"id":"CVE-2026-45819","ts":1789378340070,"field":"cvss","old":"7.5","new":null},{"seq":193850,"id":"CVE-2026-45819","ts":1789378340070,"field":"severity","old":"high","new":"medium"},{"seq":192638,"id":"CVE-2026-45819","ts":1789376325370,"field":"cvss","old":null,"new":"7.5"},{"seq":192637,"id":"CVE-2026-45819","ts":1789376325370,"field":"severity","old":"medium","new":"high"},{"seq":191425,"id":"CVE-2026-45819","ts":1789373248716,"field":"cvss","old":"7.5","new":null},{"seq":191424,"id":"CVE-2026-45819","ts":1789373248716,"field":"severity","old":"high","new":"medium"},{"seq":190210,"id":"CVE-2026-45819","ts":1789369203661,"field":"cvss","old":null,"new":"7.5"},{"seq":190209,"id":"CVE-2026-45819","ts":1789369203661,"field":"severity","old":"medium","new":"high"},{"seq":188997,"id":"CVE-2026-45819","ts":1789368115192,"field":"cvss","old":"7.5","new":null},{"seq":188996,"id":"CVE-2026-45819","ts":1789368115192,"field":"severity","old":"high","new":"medium"},{"seq":187780,"id":"CVE-2026-45819","ts":1789365064771,"field":"cvss","old":null,"new":"7.5"},{"seq":187779,"id":"CVE-2026-45819","ts":1789365064771,"field":"severity","old":"medium","new":"high"},{"seq":186567,"id":"CVE-2026-45819","ts":1789363093609,"field":"cvss","old":"7.5","new":null},{"seq":186566,"id":"CVE-2026-45819","ts":1789363093609,"field":"severity","old":"high","new":"medium"},{"seq":185353,"id":"CVE-2026-45819","ts":1789361027648,"field":"cvss","old":null,"new":"7.5"},{"seq":185352,"id":"CVE-2026-45819","ts":1789361027648,"field":"severity","old":"medium","new":"high"},{"seq":184140,"id":"CVE-2026-45819","ts":1789358016723,"field":"cvss","old":"7.5","new":null},{"seq":184139,"id":"CVE-2026-45819","ts":1789358016723,"field":"severity","old":"high","new":"medium"},{"seq":182391,"id":"CVE-2026-45819","ts":1789354157371,"field":"cvss","old":null,"new":"7.5"},{"seq":182390,"id":"CVE-2026-45819","ts":1789354157371,"field":"severity","old":"medium","new":"high"},{"seq":181184,"id":"CVE-2026-45819","ts":1789352998943,"field":"cvss","old":"7.5","new":null},{"seq":181183,"id":"CVE-2026-45819","ts":1789352998943,"field":"severity","old":"high","new":"medium"},{"seq":179977,"id":"CVE-2026-45819","ts":1789350082630,"field":"cvss","old":null,"new":"7.5"},{"seq":179976,"id":"CVE-2026-45819","ts":1789350082630,"field":"severity","old":"medium","new":"high"},{"seq":178770,"id":"CVE-2026-45819","ts":1789347934000,"field":"cvss","old":"7.5","new":null},{"seq":178769,"id":"CVE-2026-45819","ts":1789347934000,"field":"severity","old":"high","new":"medium"},{"seq":177563,"id":"CVE-2026-45819","ts":1789346220023,"field":"cvss","old":null,"new":"7.5"},{"seq":177562,"id":"CVE-2026-45819","ts":1789346220023,"field":"severity","old":"medium","new":"high"},{"seq":176356,"id":"CVE-2026-45819","ts":1789342851192,"field":"cvss","old":"7.5","new":null},{"seq":176355,"id":"CVE-2026-45819","ts":1789342851192,"field":"severity","old":"high","new":"medium"},{"seq":175810,"id":"CVE-2026-45819","ts":1789338634721,"field":"cvss","old":null,"new":"7.5"},{"seq":175809,"id":"CVE-2026-45819","ts":1789338634721,"field":"severity","old":"medium","new":"high"},{"seq":175680,"id":"CVE-2026-45819","ts":1789338464779,"field":"cvss","old":"7.5","new":null},{"seq":175679,"id":"CVE-2026-45819","ts":1789338464779,"field":"severity","old":"high","new":"medium"},{"seq":174475,"id":"CVE-2026-45819","ts":1789334663095,"field":"cvss","old":null,"new":"7.5"},{"seq":174474,"id":"CVE-2026-45819","ts":1789334663095,"field":"severity","old":"medium","new":"high"},{"seq":173270,"id":"CVE-2026-45819","ts":1789333341792,"field":"cvss","old":"7.5","new":null},{"seq":173269,"id":"CVE-2026-45819","ts":1789333341792,"field":"severity","old":"high","new":"medium"},{"seq":172084,"id":"CVE-2026-45819","ts":1789330943129,"field":"cvss","old":null,"new":"7.5"},{"seq":172083,"id":"CVE-2026-45819","ts":1789330943129,"field":"severity","old":"medium","new":"high"}]}