CVE-2026-49356Low 3.2Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core0.2%
CVE-2026-44728High 8.2Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs0.1%
CVE-2025-27789Medium 6.2Inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups0.6%
CVE-2023-45133Critical 9.4Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code0.5%