AIKIDO-2026-662563

TL;DR

Browserslist caches every distinct query result and parsed query AST in unbounded plain-object caches in index.js with no size cap, expiry, or eviction. Cheap valid queries such as since date queries expand to an effectively unbounded space of distinct cache keys, so a long-running process that feeds externally influenced query values retains one cache entry for every distinct value it has ever seen. Sustained distinct queries grow the heap without limit until the process exhausts memory and crashes, and the existing cache-clearing helper does not reset these in-memory caches. The fix replaces both caches with bounded Map instances that evict the oldest entry once a fixed maximum entry count is reached.