Babel

4 CVEs across 2 Babel products. Browse Babel vulnerabilities, severities, and proof-of-concept exploits.

Babel products with known CVEs

ProductCVEs
Babel4
Plugin-Transform-Modules-Systemjs1
Babel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-49356Low3.22026-06-22Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingU…
CVE-2026-44728High8.22026-05-26Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically…
CVE-2025-27789Medium6.22025-03-11Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular expression name…
CVE-2023-45133Critical9.32023-10-12Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions of `babel-traverse`, using Babel to…