Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
babel/@babel/traverse may allow unauthorized code execution
published 19 days ago
Summary
The JavaScript library @babel/traverse can be manipulated to run code that an attacker supplies. This could let a malicious user affect your applications that rely on this library. Update the package to version 7.21.5-tuxcare.1 as soon as possible to fix the issue.
What to do
- Update babel @babel/traverse to version 7.21.5-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/traverse |
>= 7.21.5-tuxcare.0, < 7.21.5-tuxcare.1 Fix: upgrade to 7.21.5-tuxcare.1
|
Original advisory text
TuxCare security update for @babel/traverse (1 CVE)
TuxCare rebuilt @babel/traverse to address 1 CVE. Fixed in 7.21.5-tuxcare.1.
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792162212 · OSV
Track software like this
Free during beta