CLSA-2026-1792161627 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.11.5-tuxcare.1...

CLSA-2026-1792161625 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.12.13-tuxcare.1...

CLSA-2026-1792161624 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792161623 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792161621 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792161620 TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-49356)

Summary There are vulnerabilities in core-7.26.10.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-49356. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc...

Security Bulletin:Vulnerability in core affects IBM Netezza Appliance

Summary The core package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-49356 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected ...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-49356)

Summary IBM Security SOAR uses an older version of the @babel/core component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION:...

SUSE CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356

A flaw was found in @babel/core. This vulnerability allows an attacker, who controls the input source code and can read the output, to perform an arbitrary file read. By compiling maliciously crafted code containing a sourceMappingURL comment, the attacker can read any source map file from the...

Linux Distros Unpatched Vulnerability : CVE-2026-49356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingUR...

DEBIAN-CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

@neetly/jest-config (>=1.0.0-alpha.14, <=1.0.0-alpha.16), @powerlines/plugin-alloy (>=0.14.0, <=0.26.152) +50 more potentially affected by CVE-2026-49356 via @babel/core (>=8.0.0-alpha.1, <=8.0.0-rc.5)

@babel/core NPM version =8.0.0-alpha.1, =1.0.0-alpha.14, =0.14.0, =0.12.396, =0.6.149, =0.9.0, =0.12.0, =0.12.0, =0.2.99, =0.1.0, =0.1.0, =0.1.71, =0.3.0, =0.3.0, =0.1.0, =0.7.301, =0.7.460 and more Source cves: CVE-2026-49356 Source advisory: MEND:CVE-2026-49356...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +27966 more potentially affected by CVE-2026-49356 via @babel/core (>=6.0.0-bridge.1, <=7.29.0)

@babel/core NPM version =6.0.0-bridge.1, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

CVE-2026-49356 Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356

CVE-2026-49356 affects @babel/core (Babel) prior to versions 8.0.0-rc.6 and 7.29.6. The issue allows an arbitrary file read via a sourceMappingURL comment in the input code, enabling reading of source maps from the system running Babel when the attacker controls the input source code and knows th...