ROOT-APP-NPM-CVE-2026-73089
- Source
- https://root.io/security/ROOT-APP-NPM-CVE-2026-73089
- Import Source
- https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-73089.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ROOT-APP-NPM-CVE-2026-73089
- Upstream
- Published
- 2026-09-23T14:51:12Z
- Modified
- 2026-09-23T15:15:03Z
- Summary
- CVE-2026-73089 in browserslist - Patched by Root
- Details
-
Root has patched CVE-2026-73089 in the browserslist package for Root:npm. Multiple fixed versions available.
- Database specific
{ "distro": "npm", "distro_version": "", "severity": "HIGH", "source": "Root" }
Affected packages
Root:npm / browserslist
Package
- Name
- browserslist
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed4.20.3-aikido.1Fixed4.28.4-aikido.1Fixed4.28.1-aikido.1Fixed4.12.0-aikido.1Fixed4.14.2-aikido.2Fixed4.20.2-aikido.1Fixed4.22.2-aikido.1Fixed4.25.1-aikido.1Fixed4.28.2-aikido.1Fixed4.23.0-aikido.1Fixed4.21.2-aikido.1Fixed4.21.5-aikido.1Fixed3.2.8-aikido.1Fixed4.24.2-aikido.1Fixed4.24.0-aikido.1Fixed4.7.0-aikido.1Fixed4.17.1-aikido.1Fixed4.21.4-aikido.1Fixed1.7.7-aikido.2
Database specific
all_fixed_versions
[
"4.20.3-aikido.1",
"4.28.4-aikido.1",
"4.28.1-aikido.1",
"4.12.0-aikido.1",
"4.14.2-aikido.2",
"4.20.2-aikido.1",
"4.22.2-aikido.1",
"4.25.1-aikido.1",
"4.28.2-aikido.1",
"4.23.0-aikido.1",
"4.21.2-aikido.1",
"4.21.5-aikido.1",
"3.2.8-aikido.1",
"4.24.2-aikido.1",
"4.24.0-aikido.1",
"4.7.0-aikido.1",
"4.17.1-aikido.1",
"4.21.4-aikido.1",
"1.7.7-aikido.2"
]
root_patch_version
"aikido.2"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-73089.json"
total_fixed_versions
19
upstream_version
"1.7.7"
Root:npm / @rootio/browserslist
Package
- Name
- @rootio/browserslist
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed4.20.3-root.io.1Fixed4.28.4-root.io.1Fixed4.28.1-root.io.1Fixed4.12.0-root.io.1Fixed4.14.2-root.io.2Fixed4.20.2-root.io.1Fixed4.22.2-root.io.1Fixed4.25.1-root.io.1Fixed4.28.2-root.io.1Fixed4.23.0-root.io.1Fixed4.21.2-root.io.1Fixed4.21.5-root.io.1Fixed3.2.8-root.io.1Fixed4.24.2-root.io.1Fixed4.24.0-root.io.1Fixed4.7.0-root.io.1Fixed4.17.1-root.io.1Fixed4.21.4-root.io.1Fixed1.7.7-root.io.2
Database specific
all_fixed_versions
[
"4.20.3-root.io.1",
"4.28.4-root.io.1",
"4.28.1-root.io.1",
"4.12.0-root.io.1",
"4.14.2-root.io.2",
"4.20.2-root.io.1",
"4.22.2-root.io.1",
"4.25.1-root.io.1",
"4.28.2-root.io.1",
"4.23.0-root.io.1",
"4.21.2-root.io.1",
"4.21.5-root.io.1",
"3.2.8-root.io.1",
"4.24.2-root.io.1",
"4.24.0-root.io.1",
"4.7.0-root.io.1",
"4.17.1-root.io.1",
"4.21.4-root.io.1",
"1.7.7-root.io.2"
]
root_patch_version
"root.io.2"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-73089.json"
total_fixed_versions
19
upstream_version
"1.7.7"