CVE-2026-49356
1 advisory.
npm/@babel/core CVE-2026-49356: low 3.2, EPSS 0.15%
@babel/core: Arbitrary File Read via sourceMappingURL Comment
Action: Upgrade @babel/core to 7.29.6 or later.
npm i @babel/core@8.0.0-rc.6npm i @babel/core@7.29.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0-alpha.0 | 8.0.0-rc.6 | - |
| 0 | 7.29.6 | - |
Fixed versions
| 8.0.0-rc.6 | 7.29.6 |
Sources
- osv: GHSA-4x5r-pxfx-6jf8
- https://github.com/babel/babel/security/advisories/GHSA-4x5r-pxfx-6jf8
- https://nvd.nist.gov/vuln/detail/CVE-2026-49356
- https://babeljs.io/docs/options#inputsourcemap
- https://github.com/babel/babel
CVE-2026-49356 · published · modified · JSON