Browserslist vulnerabilities

Products

• Browserslist 2

Newest

• browserslist Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM CVE-2026-73089 Fix available 7.5 HighAugust 11, 2026
• browserslist Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) CVE-2026-73088 Fix available 7.5 HighAugust 11, 2026