The vulnerability identified as CVE-2026-45819 affects baseline-browser-mapping version 2.0.0. The issue arises because the software improperly handles invalid or conflicting input parameters by calling process.exit(), which immediately terminates the process. This incorrect control flow scoping behavior (CWE-705) can be exploited to cause a denial of service by forcing the application to exit unexpectedly. The CVSS 4.0 base score is 6.6, indicating a medium severity level. There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

An attacker can cause the affected application to terminate unexpectedly by providing invalid or conflicting input parameters, leading to a denial of service. This disrupts normal operation but does not indicate privilege escalation, information disclosure, or code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid supplying invalid or conflicting input parameters to the baseline-browser-mapping component to prevent triggering process termination.