baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling
Published Aug 13, 2026
6.6
MEDIUMCVSS 4.0
EPSS 0.51%
Description
baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.
Affected products
-
- Version 2.0.0StatusaffectedConstraints<2.11.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Web-Platform-DX | Baseline-Browser-Mapping | unaffected |
|
No data.
No data.
Red Hat Edge Manager 1.1
rhem/flightctl-ui-ocp-rhel10:1789486226
Fixed · RHSA-2026:68044
Red Hat Edge Manager 1.1
rhem/flightctl-ui-ocp-rhel9:1789486446
Fixed · RHSA-2026:68253
Red Hat Edge Manager 1.1
rhem/flightctl-ui-rhel10:1789486181
Fixed · RHSA-2026:68044
Red Hat Edge Manager 1.2
rhem/flightctl-ui-ocp-rhel10:1789485920
Fixed · RHSA-2026:68006
Red Hat Edge Manager 1.2
rhem/flightctl-ui-ocp-rhel9:1789486476
Fixed · RHSA-2026:68254
Red Hat Edge Manager 1.2
rhem/flightctl-ui-rhel10:1789488111
Fixed · RHSA-2026:68006
Red Hat Edge Manager 1.2
rhem/flightctl-ui-rhel9:1789486750
Fixed · RHSA-2026:68254
Red Hat Hardened Images
grafana12-4-main-12.4.8-0.1.1.hum1
Fixed · RHSA-2026:54518
Red Hat Hardened Images
grafana13-1-main-13.1.3-0.1.1.hum1
Fixed · RHSA-2026:54517
Red Hat OpenShift AI 2.25
rhoai/odh-dashboard-rhel9:1788312226
Fixed · RHSA-2026:65126
Red Hat OpenShift AI 2.25
rhoai/odh-mod-arch-model-registry-rhel9:1788312157
Fixed · RHSA-2026:65126
Red Hat OpenShift Dev Spaces 3.30
devspaces/dashboard-rhel9:1789162884
Fixed · RHSA-2026:68754
Red Hat Satellite 6.18
satellite/iop-vulnerability-frontend-rhel9:1789660969
Fixed · RHSA-2026:68765
Red Hat Satellite 6.19
satellite/iop-vulnerability-frontend-rhel9:1789660983
Fixed · RHSA-2026:68755
Cryostat 4
cryostat/cryostat-openshift-console-plugin-rhel9
Not affected
OpenShift Lightspeed
openshift-lightspeed/lightspeed-agentic-console-rhel9
Affected
OpenShift Lightspeed
openshift-lightspeed/lightspeed-console-plugin-419-rhel9
Affected
OpenShift Lightspeed
openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
Affected
OpenShift Lightspeed
openshift-lightspeed/lightspeed-console-plugin-rhel9
Affected
OpenShift Pipelines
openshift-pipelines/pipelines-console-plugin-pf5-rhel9
Affected
OpenShift Pipelines
openshift-pipelines/pipelines-console-plugin-rhel9
Affected
OpenShift Pipelines
openshift-pipelines/pipelines-hub-ui-rhel9
Affected
OpenShift Service Mesh 3
openshift-service-mesh/kiali-ossmc-rhel9
Not affected
OpenShift Service Mesh 3
openshift-service-mesh/kiali-rhel9
Not affected
Red Hat AMQ Broker 7
amq-broker-bin.zip
Not affected
Red Hat AMQ Broker 7
amq-broker-maven-repository.zip
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-25/lightspeed-rhel8
Will not fix
Red Hat Ansible Automation Platform 2
ansible-automation-platform-26/gateway-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-26/lightspeed-rhel9
Not affected
Red Hat Ansible Automation Platform 2
ansible-automation-platform-27/gateway-rhel9
Not affected
Red Hat Ansible Automation Platform 2
automation-platform-ui
Not affected
Red Hat Build of Keycloak
rhbk-quarkus-dist.zip
Not affected
Red Hat Build of Podman Desktop
rh-podman-desktop.git
Affected
Red Hat Ceph Storage 9
ceph
Affected
Red Hat Data Grid 8
redhat-datagrid-maven-repository.zip
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-lightspeed
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets
Not affected
Red Hat Developer Hub
rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator
Not affected
Red Hat Developer Hub
rhdh/rhdh-hub-rhel9
Not affected
Red Hat Discovery 2
discovery/discovery-ui-rhel9
Affected
Red Hat Enterprise Linux 10
rust
Not affected
Red Hat Enterprise Linux 8
dotnet8.0
Not affected
Red Hat Enterprise Linux 9
rust
Not affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rust
Affected
Red Hat Hardened Images
dotnet8.0
Not affected
Red Hat Hardened Images
jaeger
Not affected
Red Hat Hardened Images
nodejs26
Not affected
Red Hat Hardened Images
opentelemetry-collector
Not affected
Red Hat Hardened Images
opentelemetry-collector-contrib
Not affected
Red Hat Hardened Images
opentelemetry-collector-k8s
Not affected
Red Hat Hardened Images
prometheus3.13
Not affected
Red Hat Hardened Images
rust
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mlflow-rhel9
Not affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-automl-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-autorag-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-eval-hub-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-gen-ai-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-maas-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-mod-arch-mlflow-rhel9
Affected
Red Hat OpenShift Container Platform 4
openshift4/nmstate-console-plugin-rhel9
Affected
Red Hat OpenShift Container Platform 4
openshift4/ose-agent-installer-ui-rhel9
Affected
Red Hat OpenShift Container Platform 4
openshift4/ose-console
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-console-rhel9
Not affected
Red Hat OpenShift Container Platform 4
openshift4/ose-monitoring-plugin-rhel9
Not affected
Red Hat OpenShift Dev Spaces
devspaces/openvsx-rhel9
Not affected
Red Hat Openshift Data Foundation 4
odf4/ocs-client-console-rhel9
Affected
Red Hat Openshift Data Foundation 4
odf4/odf-console-rhel9
Affected
Red Hat Openshift Data Foundation 4
odf4/odf-multicluster-console-rhel9
Affected
Red Hat Quay 3
quay/quay-rhel8
Not affected
Red Hat Satellite 6
nodejs-babel-core
Affected
Red Hat Satellite 6
nodejs-webpack
Affected
Red Hat Satellite 6
satellite/iop-advisor-frontend-rhel9
Affected
Secrets Management Console for Red Hat OpenShift
external-secrets-management/console-plugin-rhel9
Will not fix
Self-service automation portal 2
ansible-automation-platform/automation-portal
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Edge Manager 1.1 | rhem/flightctl-ui-ocp-rhel10:1789486226 | Fixed | RHSA-2026:68044 |
| Red Hat Edge Manager 1.1 | rhem/flightctl-ui-ocp-rhel9:1789486446 | Fixed | RHSA-2026:68253 |
| Red Hat Edge Manager 1.1 | rhem/flightctl-ui-rhel10:1789486181 | Fixed | RHSA-2026:68044 |
| Red Hat Edge Manager 1.2 | rhem/flightctl-ui-ocp-rhel10:1789485920 | Fixed | RHSA-2026:68006 |
| Red Hat Edge Manager 1.2 | rhem/flightctl-ui-ocp-rhel9:1789486476 | Fixed | RHSA-2026:68254 |
| Red Hat Edge Manager 1.2 | rhem/flightctl-ui-rhel10:1789488111 | Fixed | RHSA-2026:68006 |
| Red Hat Edge Manager 1.2 | rhem/flightctl-ui-rhel9:1789486750 | Fixed | RHSA-2026:68254 |
| Red Hat Hardened Images | grafana12-4-main-12.4.8-0.1.1.hum1 | Fixed | RHSA-2026:54518 |
| Red Hat Hardened Images | grafana13-1-main-13.1.3-0.1.1.hum1 | Fixed | RHSA-2026:54517 |
| Red Hat OpenShift AI 2.25 | rhoai/odh-dashboard-rhel9:1788312226 | Fixed | RHSA-2026:65126 |
| Red Hat OpenShift AI 2.25 | rhoai/odh-mod-arch-model-registry-rhel9:1788312157 | Fixed | RHSA-2026:65126 |
| Red Hat OpenShift Dev Spaces 3.30 | devspaces/dashboard-rhel9:1789162884 | Fixed | RHSA-2026:68754 |
| Red Hat Satellite 6.18 | satellite/iop-vulnerability-frontend-rhel9:1789660969 | Fixed | RHSA-2026:68765 |
| Red Hat Satellite 6.19 | satellite/iop-vulnerability-frontend-rhel9:1789660983 | Fixed | RHSA-2026:68755 |
| Cryostat 4 | cryostat/cryostat-openshift-console-plugin-rhel9 | Not affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-agentic-console-rhel9 | Affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-console-plugin-419-rhel9 | Affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9 | Affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed/lightspeed-console-plugin-rhel9 | Affected | n/a |
| OpenShift Pipelines | openshift-pipelines/pipelines-console-plugin-pf5-rhel9 | Affected | n/a |
| OpenShift Pipelines | openshift-pipelines/pipelines-console-plugin-rhel9 | Affected | n/a |
| OpenShift Pipelines | openshift-pipelines/pipelines-hub-ui-rhel9 | Affected | n/a |
| OpenShift Service Mesh 3 | openshift-service-mesh/kiali-ossmc-rhel9 | Not affected | n/a |
| OpenShift Service Mesh 3 | openshift-service-mesh/kiali-rhel9 | Not affected | n/a |
| Red Hat AMQ Broker 7 | amq-broker-bin.zip | Not affected | n/a |
| Red Hat AMQ Broker 7 | amq-broker-maven-repository.zip | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-25/lightspeed-rhel8 | Will not fix | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-26/gateway-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-26/lightspeed-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-27/gateway-rhel9 | Not affected | n/a |
| Red Hat Ansible Automation Platform 2 | automation-platform-ui | Not affected | n/a |
| Red Hat Build of Keycloak | rhbk-quarkus-dist.zip | Not affected | n/a |
| Red Hat Build of Podman Desktop | rh-podman-desktop.git | Affected | n/a |
| Red Hat Ceph Storage 9 | ceph | Affected | n/a |
| Red Hat Data Grid 8 | redhat-datagrid-maven-repository.zip | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-lightspeed | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets | Not affected | n/a |
| Red Hat Developer Hub | rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator | Not affected | n/a |
| Red Hat Developer Hub | rhdh/rhdh-hub-rhel9 | Not affected | n/a |
| Red Hat Discovery 2 | discovery/discovery-ui-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux 10 | rust | Not affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | rust | Not affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rust | Affected | n/a |
| Red Hat Hardened Images | dotnet8.0 | Not affected | n/a |
| Red Hat Hardened Images | jaeger | Not affected | n/a |
| Red Hat Hardened Images | nodejs26 | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector-contrib | Not affected | n/a |
| Red Hat Hardened Images | opentelemetry-collector-k8s | Not affected | n/a |
| Red Hat Hardened Images | prometheus3.13 | Not affected | n/a |
| Red Hat Hardened Images | rust | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mlflow-rhel9 | Not affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-automl-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-autorag-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-eval-hub-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-gen-ai-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-maas-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-mod-arch-mlflow-rhel9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/nmstate-console-plugin-rhel9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-agent-installer-ui-rhel9 | Affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console-rhel9 | Not affected | n/a |
| Red Hat OpenShift Container Platform 4 | openshift4/ose-monitoring-plugin-rhel9 | Not affected | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/openvsx-rhel9 | Not affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/ocs-client-console-rhel9 | Affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-console-rhel9 | Affected | n/a |
| Red Hat Openshift Data Foundation 4 | odf4/odf-multicluster-console-rhel9 | Affected | n/a |
| Red Hat Quay 3 | quay/quay-rhel8 | Not affected | n/a |
| Red Hat Satellite 6 | nodejs-babel-core | Affected | n/a |
| Red Hat Satellite 6 | nodejs-webpack | Affected | n/a |
| Red Hat Satellite 6 | satellite/iop-advisor-frontend-rhel9 | Affected | n/a |
| Secrets Management Console for Red Hat OpenShift | external-secrets-management/console-plugin-rhel9 | Will not fix | n/a |
| Self-service automation portal 2 | ansible-automation-platform/automation-portal | Affected | n/a |
baseline-browser-mapping
npm
Introduced 2.0.0 Fixed 2.11.0
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | baseline-browser-mapping | 2.0.0 | 2.11.0 |
Remediation
Red Hat statement
Important: This flaw in the 'baseline-browser-mapping' library can result in a denial of service. Applications utilizing this library may unexpectedly terminate if they process invalid or conflicting input parameters, potentially disrupting services.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
References (11)
- https://access.redhat.com/security/cve/CVE-2026-45819 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515240 Issue Tracking
- https://github.com/advisories/GHSA-w5vr-8v7q-w6rv Advisory
- https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142
- https://github.com/web-platform-dx/baseline-browser-mapping/commit/de733e2d8959559f7bb255d5927f3afcb6f31589
- https://github.com/web-platform-dx/baseline-browser-mapping/pull/137
- https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519 patch
- https://github.com/web-platform-dx/baseline-browser-mapping/releases/tag/v2.11.0
- https://nvd.nist.gov/vuln/detail/CVE-2026-45819
- https://www.cve.org/CVERecord?id=CVE-2026-45819
- https://www.npmjs.com/package/baseline-browser-mapping
Change history (0)
No recorded changes yet.