browserslist
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) | browserslistNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 | npmRed Hat | High | Fix reported | |
| Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM | browserslistNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 | npmRed Hat | High | Fix reported | |
| Regular Expression Denial of Service in browserslist | browserslistOpenShift Service Mesh 2.0/servicemesh-grafana | npmRed Hat | Medium | Fix reported |