{
  "@id": "urn:uuid:913ddb31-4941-4e57-9f1e-a2492aaafa8f",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T10:35:00.446672+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/baseline-browser-mapping@2.11.17",
          "identifiers": {
            "purl": "pkg:npm/baseline-browser-mapping@2.11.17"
          }
        }
      ],
      "timestamp": "2026-11-04T10:35:00.446672+00:00",
      "status_notes": "Vulnerability CVE-2026-45819 does not affect version 2.11.17 of baseline-browser-mapping. not_affected \u2014 The target (baseline-browser-mapping v2.11.17) is not affected by CVE-2026-45819. The vulnerability required process.exit() calls on invalid input, causing denial of service. The upstream project fixed this in v2.11.0 by replacing process.exit() with throw new Error(). The target version 2.11.17 is 17 patch releases after the fix was introduced in the upstream release. All input validation code...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-45819"
      },
      "impact_statement": "not_affected \u2014 The target (baseline-browser-mapping v2.11.17) is not affected by CVE-2026-45819. The vulnerability required process.exit() calls on invalid input, causing denial of service. The upstream project fixed this in v2.11.0 by replacing process.exit() with throw new Error(). The target version 2.11.17 is 17 patch releases after the fix was introduced in the upstream release. All input validation code..."
    }
  ]
}