Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Babel plugin could run unwanted code
published 18 days ago
Summary
The @babel/plugin-transform-template-literals component can be tricked into executing code that an attacker supplies. This could let a malicious party run unauthorized actions on your system. Update the plugin to version 7.21.0‑tuxcare.4 or later to remove the risk.
What to do
- Update babel @babel/plugin-transform-template-literals to version 7.21.0-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/plugin-transform-template-literals |
>= 7.21.0-tuxcare.0, < 7.21.0-tuxcare.4 Fix: upgrade to 7.21.0-tuxcare.4
|
Original advisory text
TuxCare security update for @babel/plugin-transform-template-literals (1 CVE)
TuxCare rebuilt @babel/plugin-transform-template-literals to address 1 CVE. Fixed in 7.21.0-tuxcare.4.
Timeline
Published18 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792283512 · OSV
Track software like this
Free during beta