Vulnerabilities in babel

4 results

Vexday analysis

Babel apresenta um perfil de risco moderado com 4 vulnerabilidades registradas, das quais 1 é crítica; nenhuma está sendo explorada ativamente no momento. Dois registros foram publicados nos últimos 90 dias, indicando atividade recente de descoberta, com a fraqueza dominante concentrada em CWE-1333 (Ineficient Regular Expression).

CVE-2023-45133CRITICALBabel vulnerable to arbitrary code execution when compiling specifically crafted malicious codeEPSS 0.5%CVE-2025-27789MEDIUMInefficient RexExp complexity in generated code with .replace when transpiling named capturing groupsEPSS 0.5%CVE-2026-49356LOWBabel: Arbitrary File Read via sourceMappingURL Comment in @babel/coreEPSS 0.1%CVE-2026-44728HIGHImproper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjsEPSS 0.1%