azure linux babel vulnerabilities

Latest azure linux babel CVEs

Newest publication first

1. CVE-2026-49356 Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core

   Published 2026-06-22

   Low·CVSS 3.6 EPSS 0.15%

   Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the s...

2. CVE-2025-27789 Inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups

   Published 2025-03-11

   Medium·CVSS 6.2 EPSS 0.56%

   Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular expression named capturing groups, Babel will generate a polyfill for the .replace method that has quadratic complexity on some specific...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.