{
  "@id": "urn:uuid:21e83cf8-f56c-44eb-9c62-ba56b691844d",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T10:35:00.446672+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/baseline-browser-mapping@2.11.19",
          "identifiers": {
            "purl": "pkg:npm/baseline-browser-mapping@2.11.19"
          }
        }
      ],
      "timestamp": "2026-11-04T10:35:00.446672+00:00",
      "status_notes": "Vulnerability CVE-2026-45819 does not affect version 2.11.19 of baseline-browser-mapping. not_affected \u2014 CVE-2026-45819 affects baseline-browser-mapping versions 2.x before 2.11.0. The target version 2.11.19 includes the upstream fix (commit de733e2) that replaced process.exit() calls with throw statements in library functions. The vulnerable code pattern is not present because the fix shipped in upstream release v2.11.0, authored by Tony Conway (GitHub user, not TuxCare). The library now throws c...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-45819"
      },
      "impact_statement": "not_affected \u2014 CVE-2026-45819 affects baseline-browser-mapping versions 2.x before 2.11.0. The target version 2.11.19 includes the upstream fix (commit de733e2) that replaced process.exit() calls with throw statements in library functions. The vulnerable code pattern is not present because the fix shipped in upstream release v2.11.0, authored by Tony Conway (GitHub user, not TuxCare). The library now throws c..."
    }
  ]
}
