THREAT OPS › Threat News › [GHSA] GHSA-c83g-rgw3-j3cx (high) — Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
[GHSA] GHSA-c83g-rgw3-j3cx (high) — Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
GHSA-c83g-rgw3-j3cx Severity: high CVE: CVE-2026-73089
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM
## Vulnerability Details
**File**: `index.js` **Location**: `cache` (browserslist()'s result cache, line ~402) and `parseCache` (parseQueries()'s AST cache)
### Root Cause ```js var cache = {} var parseCache = {}
function browsers
Indicators of compromise
- CVE-2026-73089cve
Original source: https://github.com/advisories/GHSA-c83g-rgw3-j3cx