Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Babel plugin could allow malicious code execution
published 15 days ago
Summary
The @babel/plugin-syntax-decorators package used in JavaScript projects had two security weaknesses that could let attackers run unwanted code. The problem is fixed in the updated version 7.21.5-tuxcare.2. Update the package to this version as soon as possible to stay protected.
What to do
- Update babel @babel/plugin-syntax-decorators to version 7.21.5-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/plugin-syntax-decorators |
>= 7.21.5-tuxcare.0, < 7.21.5-tuxcare.2 Fix: upgrade to 7.21.5-tuxcare.2
|
Original advisory text
TuxCare security update for @babel/plugin-syntax-decorators (2 CVEs)
TuxCare rebuilt @babel/plugin-syntax-decorators to address 2 CVEs. Fixed in 7.21.5-tuxcare.2.
Timeline
Published20 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792540678 · OSV
Track software like this
Free during beta