node-browserslist vulnerabilities (Debian)

3 vulnerabilities.

• node-browserslist Debian Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM CVE-2026-73089 Fix available 7.5 HighAugust 11, 2026
• node-browserslist Debian Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) CVE-2026-73088 Fix available 7.5 HighAugust 11, 2026
• node-browserslist Debian Regular Expression Denial of Service (ReDoS) CVE-2021-23364 Fix available 5.3 MediumApril 28, 2021