CVE-2026-44728
1 advisory.
npm/@babel/plugin-transform-modules-systemjs CVE-2026-44728: high 8.2
@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
Action: Upgrade @babel/plugin-transform-modules-systemjs to 7.29.4 or later.
npm i @babel/plugin-transform-modules-systemjs@7.29.4npm i @babel/plugin-transform-modules-systemjs@8.0.0-alpha.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.12.0 | 7.29.4 | - |
| 8.0.0-alpha.0 | 8.0.0-alpha.13 | - |
Fixed versions
| 7.29.4 | 8.0.0-alpha.13 |
Sources
- osv: GHSA-fv7c-fp4j-7gwp
- https://github.com/babel/babel/security/advisories/GHSA-fv7c-fp4j-7gwp
- https://nvd.nist.gov/vuln/detail/CVE-2026-44728
- https://github.com/babel/babel
CVE-2026-44728 · published · modified · JSON