Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Babel plugin may allow code execution
published 15 days ago
Summary
The @babel/plugin-transform-function-name component can be tricked into running malicious code, putting your applications at risk. TuxCare has released a rebuilt version (7.18.9‑tuxcare.3) that removes this weakness. Update to the new version as soon as possible to keep your systems safe.
What to do
- Update babel @babel/plugin-transform-function-name to version 7.18.9-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/plugin-transform-function-name |
>= 7.18.9-tuxcare.0, < 7.18.9-tuxcare.3 Fix: upgrade to 7.18.9-tuxcare.3
|
Original advisory text
TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3.
Timeline
Published20 Oct 2026
Updated20 Oct 2026
First seen20 Oct 2026
Sources
CLSA-2026-1792506477 · OSV
Track software like this
Free during beta