THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-c83g-rgw3-j3cx (high) — Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

[GHSA] GHSA-c83g-rgw3-j3cx (high) — Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

medgithub_advisoriesPublished 2026-09-01

GHSA-c83g-rgw3-j3cx Severity: high CVE: CVE-2026-73089

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

## Vulnerability Details

**File**: `index.js` **Location**: `cache` (browserslist()'s result cache, line ~402) and `parseCache` (parseQueries()'s AST cache)

### Root Cause ```js var cache = {} var parseCache = {}

function browsers

Indicators of compromise

Original source: https://github.com/advisories/GHSA-c83g-rgw3-j3cx