Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
babel/@babel/helper-module-imports may run unwanted code
published 15 days ago
Summary
The @babel/helper-module-imports component used in JavaScript projects had a security weakness that could let attackers execute unwanted code. TuxCare has rebuilt this component and released a safe version, 7.12.18-tuxcare.2. Update to the new version as soon as possible to protect your applications.
What to do
- Update babel @babel/helper-module-imports to version 7.12.18-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | babel | @babel/helper-module-imports |
>= 7.12.18-tuxcare.0, < 7.12.18-tuxcare.2 Fix: upgrade to 7.12.18-tuxcare.2
|
Original advisory text
TuxCare security update for @babel/helper-module-imports (1 CVE)
TuxCare rebuilt @babel/helper-module-imports to address 1 CVE. Fixed in 7.12.18-tuxcare.2.
Timeline
Published20 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2026-1792529423 · OSV
Track software like this
Free during beta