CVE-2026-73088
HIGH
7,5
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Description
AI Translation Available
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() and loadStat() on every browserslist() call, processes untrusted browserslist-stats.json, opts.stats, and CLI --stats data with an unguarded for...in loop and plain-object bracket access and assignment, allowing inherited Object.prototype keys including __proto__, toString, valueOf, constructor, hasOwnProperty, and isPrototypeOf to cause an uncaught TypeError or modify the prototype of the returned normalized object. This issue is fixed in version 4.28.7.
248
Uncaught Exception
DraftCommon Consequences
Security Scopes Affected:
Availability
Confidentiality
Potential Impacts:
Dos: Crash, Exit, Or Restart
Read Application Data
Applicable Platforms
Languages:
C++, Java, C#
1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
IncompleteCommon Consequences
Security Scopes Affected:
Confidentiality
Integrity
Availability
Potential Impacts:
Read Application Data
Modify Application Data
Dos: Crash, Exit, Or Restart
Applicable Platforms
Languages:
JavaScript
https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255…
https://github.com/browserslist/browserslist/releases/tag/4.28.7
https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98…