Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-49356)

Summary IBM Security SOAR uses an older version of the @babel/core component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION:...

CVE-2026-49356

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is...

CVE-2026-49356 vulnerabilities

Vulnerabilities for packages: langfuse-fips, argo-workflows, vitess, langfuse, kubeflow-katib, wazuh-dashboard-fips, ts-patch, gitlab-rails-ce-fips, airflow, gitlab-rails-ce, py3-captum, wazuh-dashboard, authentik-fips, authentik...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +28002 more potentially affected by CVE-2026-49356 via @babel/core (>=7.0.0, <=7.29.0)

@babel/core NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +28002 more potentially affected by CVE-2026-49356 via @babel/core (>=7.0.0, <=7.29.0)

@babel/core NPM version =7.0.0, =1.0.1, =1.1.0 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 - 0xgank-tea-child-evening 1.0....