Description
File: index.js Location: cache (browserslist()’s result cache, line ~402) and parseCache (parseQueries()’s AST cache)
Recommendation
Update the browserslist package to the latest compatible version. Followings are version details:
- Affected version(s): <= 4.28.6
- Patched version(s): 4.28.7
References
Could your website be exposed too?
SmartScanner can check your website for Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM and gives you actionable findings to investigate.
Start a free scanRelated Issues
- LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime) - CVE-2026-45357
- ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion - CVE-2026-85715
- oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass - CVE-2026-77360
- OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover - CVE-2026-44720
You might also like:
See something that needs correcting? Let us knowUpdated September 01, 2026