CyberRota Analysis
AI-GeneratedBrowserslist versions prior to 4.28.7 are vulnerable to a TypeError and potential prototype modification due to improper handling of untrusted input in the normalizeStats() function. This flaw allows inherited Object.prototype keys to be processed without safeguards, which could lead to unexpected behavior or security issues in applications relying on this library. Developers and organizations using Browserslist should prioritize upgrading to version 4.28.7 or later to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() and loadStat() on every browserslist() call, processes untrusted browserslist-stats.json, opts.stats, and CLI --stats data with an unguarded for...in loop and plain-object bracket access and assignment, allowing inherited Object.prototype keys including __proto__, toString, valueOf, constructor, hasOwnProperty, and isPrototypeOf to cause an uncaught TypeError or modify the prototype of the returned normalized object. This issue is fixed in version 4.28.7.