GHSA-w5vr-8v7q-w6rv moderate
baseline-browser-mapping process termination on invalid input causes denial of service
Affected range
SEMVER: introduced 2.0.0; fixed 2.11.0Fixed versions: 2.11.0
baseline-browser-mapping
A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.
npm latest 2.11.25 Apache-2.0
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
2.11.25
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Moderate
1 active advisory
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records