Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Babel helper-wrap-function may let attackers run code
published 17 days ago
Summary
The @babel/helper-wrap-function package used in JavaScript projects could allow an attacker to execute malicious code. This risk matters because it can compromise the security of any application that includes the package. Updating to version 7.29.0-tuxcare.2 resolves the issue, so apply the update as soon as possible.
What to do
- Update babel @babel/helper-wrap-function to version 7.29.0-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/helper-wrap-function |
>= 7.29.0-tuxcare.0, < 7.29.0-tuxcare.2 Fix: upgrade to 7.29.0-tuxcare.2
|
Original advisory text
TuxCare security update for @babel/helper-wrap-function (1 CVE)
TuxCare rebuilt @babel/helper-wrap-function to address 1 CVE. Fixed in 7.29.0-tuxcare.2.
Timeline
Published18 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792304212 · OSV
Track software like this
Free during beta