CyberSecBulletin

Browserslist vulnerabilities

We track 2 vulnerabilities in Browserslist products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Browserslist vulnerabilities

  • 7.5 High severity

    browserslist: Allocation of Resources Without Limits or Throttling

    CVE-2026-73089Browserslist

    Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct `(queries, context)` result in cache and every parseQueries() AST in parseCache without a size cap,

  • 7.5 High severity

    browserslist: Uncaught Exception

    CVE-2026-73088Browserslist

    Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() and loadStat() on every browserslist() call, processes untrus