{
  "@id": "urn:uuid:7180b093-233b-4ca4-9148-365a9cb63421",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T10:44:00.034052+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/baseline-browser-mapping@2.11.18",
          "identifiers": {
            "purl": "pkg:npm/baseline-browser-mapping@2.11.18"
          }
        }
      ],
      "timestamp": "2026-11-04T10:44:00.034052+00:00",
      "status_notes": "Vulnerability CVE-2026-45819 does not affect version 2.11.18 of baseline-browser-mapping. not_affected \u2014 Target version 2.11.18 is NOT vulnerable. The vulnerable code pattern (process.exit() calls in error handling for invalid configuration parameters) was removed by upstream commit de733e2d in release 2.11.0. The target includes this fix, which replaced process.exit() calls with throw new Error() statements in both kaiOSWarning and the targetYear/widelyAvailableOnDate validation logic. CVE-2026-4...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-45819"
      },
      "impact_statement": "not_affected \u2014 Target version 2.11.18 is NOT vulnerable. The vulnerable code pattern (process.exit() calls in error handling for invalid configuration parameters) was removed by upstream commit de733e2d in release 2.11.0. The target includes this fix, which replaced process.exit() calls with throw new Error() statements in both kaiOSWarning and the targetYear/widelyAvailableOnDate validation logic. CVE-2026-4..."
    }
  ]
}