@babel

Products

Exploited and recent CVEs

• CVE-2026-49356 Low 3.2 Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core 0.2%
• CVE-2026-44728 High 8.2 Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs 0.1%
• CVE-2026-44728 High 8.2 Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs 0.1%
• CVE-2025-27789 Medium 6.2 Inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups 0.6%
• CVE-2023-45133 Critical 9.4 Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code 0.5%