browserslist
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| browserslist | 2 | – | Aug 11, 2026 |
Exploited and recent CVEs
- CVE-2026-73089 Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM 0.7%
- CVE-2026-73088 Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) 0.7%