REDHAT-BUG-2515240: High severity npm/baseline-browser-mapping vulnerability

Q: What conditions are required to trigger the denial of service?

The vulnerable package must process invalid or conflicting input parameters. Under those conditions, it calls process.exit() and immediately terminates the running process.

Q: Which installations are affected?

baseline-browser-mapping versions in the 2.x series before 2.11.0 are affected. Version 2.11.0 and later are not identified as affected by the provided information.

Q: What is the practical impact for applications using this package?

An affected application can be forced into immediate process termination when the vulnerable code receives invalid or conflicting parameters, resulting in denial of service.

Published Aug 13, 2026

Updated

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Affected Software

1 affected component

npm/baseline-browser-mapping>=2.0.0<2.11.0

Event History

Aug 13, 2026

Data Sourced

via Red Hat·11:43 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to trigger the denial of service?

The vulnerable package must process invalid or conflicting input parameters. Under those conditions, it calls process.exit() and immediately terminates the running process.

Which installations are affected?

baseline-browser-mapping versions in the 2.x series before 2.11.0 are affected. Version 2.11.0 and later are not identified as affected by the provided information.

What is the practical impact for applications using this package?

An affected application can be forced into immediate process termination when the vulnerable code receives invalid or conflicting parameters, resulting in denial of service.

REDHAT-BUG-2515240: High severity npm/baseline-browser-mapping vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required to trigger the denial of service?

Which installations are affected?

What is the practical impact for applications using this package?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the denial of service?

Which installations are affected?

What is the practical impact for applications using this package?