Skip to content
OpenAdvisories
Critical USN-9054-1 1 CVE

node-babel vulnerability

Published Nov 11, 2026 · Updated Nov 12, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Babel incorrectly evaluated certain code during
compilation when used with certain plugins. If a user or an automated
system were tricked into compiling specially crafted code, an attacker
could possibly use this issue to execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS node-babel 6.26.0+dfsg-3ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS node-babel 6.26.0+repack-3ubuntu0.1~esm1

Vulnerabilities 1

  • Critical 9.4
    CVE-2023-45133

    Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

    Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions of `babel-traverse`, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution duri…

    babel babel node-babel7 node-babel7 Debian Ubuntu npm

References

  • report
    https://ubuntu.com/security/CVE-2023-45133