Skip to content
OpenAdvisories
Critical DSA-5528-1 1 CVE

node-babel7 - security update

Published Oct 16, 2023 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 node-babel7 7.12.12+~cs150.141.84-6+deb11u1
Debian · 12 node-babel7 7.20.15+ds1+~cs214.269.168-3+deb12u1

Vulnerabilities 1

  • Critical 9.4

    Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

    Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions of `babel-traverse`, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution duri…