CVE-2026-44728

Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs

8.2 HighFix available

What does this mean?

: 8.2v3.1, from CVE List
: 0.12%2nd percentile
Fixed in: 7.29.4@babel/plugin-transform-modules-systemjs
Published: May 8, 2026
Modified: November 2, 2026
Weakness: CWE-843CWE-94
Also known as: CLSA-2026-1784336946CLSA-2026-1784509777CLSA-2026-1784509815CLSA-2026-1790161979CLSA-2026-1792160961CLSA-2026-1792161418CLSA-2026-1792161419CLSA-2026-1792161420
Show 92 moreShow less
CLSA-2026-1792161615CLSA-2026-1792161616CLSA-2026-1792161617CLSA-2026-1792161631CLSA-2026-1792161666CLSA-2026-1792161730CLSA-2026-1792161731CLSA-2026-1792161732CLSA-2026-1792161743CLSA-2026-1792161886CLSA-2026-1792161887CLSA-2026-1792161888CLSA-2026-1792161898CLSA-2026-1792161951CLSA-2026-1792161983CLSA-2026-1792161984CLSA-2026-1792161985CLSA-2026-1792162020CLSA-2026-1792162021CLSA-2026-1792162045CLSA-2026-1792162046CLSA-2026-1792162069CLSA-2026-1792162070CLSA-2026-1792162089CLSA-2026-1792162090CLSA-2026-1792162091CLSA-2026-1792162113CLSA-2026-1792162114CLSA-2026-1792162115CLSA-2026-1792162136CLSA-2026-1792162138CLSA-2026-1792162139CLSA-2026-1792162156CLSA-2026-1792162157CLSA-2026-1792162158CLSA-2026-1792162178CLSA-2026-1792162179CLSA-2026-1792162180CLSA-2026-1792162207CLSA-2026-1792162208CLSA-2026-1792162210CLSA-2026-1792163437CLSA-2026-1792163438CLSA-2026-1792163439CLSA-2026-1792163450CLSA-2026-1792194429CLSA-2026-1792194430CLSA-2026-1792194432CLSA-2026-1792201263CLSA-2026-1792201264CLSA-2026-1792201265CLSA-2026-1792278635CLSA-2026-1792278636CLSA-2026-1792278637CLSA-2026-1792283507CLSA-2026-1792283508CLSA-2026-1792283509CLSA-2026-1792285562CLSA-2026-1792285563CLSA-2026-1792285564CLSA-2026-1792286712CLSA-2026-1792289873CLSA-2026-1792291417CLSA-2026-1792291418CLSA-2026-1792291419CLSA-2026-1792292296CLSA-2026-1792292297CLSA-2026-1792302623CLSA-2026-1792304208CLSA-2026-1792304209CLSA-2026-1792304210CLSA-2026-1792306775CLSA-2026-1792306776CLSA-2026-1792308466CLSA-2026-1792309331CLSA-2026-1792309332CLSA-2026-1792312962CLSA-2026-1792342438CLSA-2026-1792342439CLSA-2026-1792342440CLSA-2026-1792361346CLSA-2026-1792361347CLSA-2026-1792361348CLSA-2026-1792369489CLSA-2026-1792369490CLSA-2026-1792369491CLSA-2026-1792373910DEBIAN-CVE-2026-44728EUVD-2026-31946GHSA-fv7c-fp4j-7gwpROOT-APP-NPM-CVE-2026-44728UBUNTU-CVE-2026-44728

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and 8.0.0-alpha.13.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.12%Up 0.1 points since May 27, 2026

What each source reports

CVE List Score used 8.2

Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs

Record: CVE-2026-44728
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-94, CWE-843
Updated: 2026-11-02

EUVDEUVD-2026-31946 8.2

Record: EUVD-2026-31946
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-fv7c-fp4j-7gwp 8.2

@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input

Impact

Using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code.

Known affected plugins are:

@babel/plugin-transform-modules-systemjs
@babel/preset-env when using the modules: "systemjs" option, as it delegates to @babel/plugin-transform-modules-systemjs

No other plugins under the @babel namespace are impacted.

Users that only compile trusted code are not impacted.

Patches

The vulnerability has been fixed in @babel/[email protected].

Babel also released @babel/[email protected], updating its @babel/plugin-transform-modules-systemjs dependency, to simplify forcing the update if you are using @babel/preset-env directly.

Workarounds

Pin @babel/parser to v7.11.5. The downgrade will completely disable string module name parsing, but it would also disable other new language features and the build pipeline may fail as a result. Only do so if you are working on a legacy codebase and can not upgrade @babel/plugin-transform-modules-systemjs to v7.29.4.
Do not use the modules: "systemjs" option, migrate the codebase to native ES Modules or any other module formats.

Credits

Babel thanks Daniel Cervera for reporting the vulnerability.

Record: GHSA-fv7c-fp4j-7gwp
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-94, CWE-843
Updated: 2026-11-02

NVD 8.2

Record: CVE-2026-44728
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-94, CWE-843
Updated: 2026-11-02

OSV 8.2

Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs

Record: CVE-2026-44728
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-843, CWE-94
Updated: 2026-11-02

OSVDEBIAN-CVE-2026-44728 7.8

Record: DEBIAN-CVE-2026-44728
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 48 moreShow less

OSVGHSA-fv7c-fp4j-7gwp 8.2

@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input

Impact

Using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code.

Known affected plugins are:

@babel/plugin-transform-modules-systemjs
@babel/preset-env when using the modules: "systemjs" option, as it delegates to @babel/plugin-transform-modules-systemjs

No other plugins under the @babel namespace are impacted.

Users that only compile trusted code are not impacted.

Patches

The vulnerability has been fixed in @babel/[email protected].

Babel also released @babel/[email protected], updating its @babel/plugin-transform-modules-systemjs dependency, to simplify forcing the update if you are using @babel/preset-env directly.

Workarounds

Pin @babel/parser to v7.11.5. The downgrade will completely disable string module name parsing, but it would also disable other new language features and the build pipeline may fail as a result. Only do so if you are working on a legacy codebase and can not upgrade @babel/plugin-transform-modules-systemjs to v7.29.4.
Do not use the modules: "systemjs" option, migrate the codebase to native ES Modules or any other module formats.

Credits

Babel thanks Daniel Cervera for reporting the vulnerability.

Record: GHSA-fv7c-fp4j-7gwp
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-843, CWE-94
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-44728 8.2

Record: UBUNTU-CVE-2026-44728
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2026-1784336946 No score

TuxCare security update for @babel/plugin-transform-modules-systemjs (1 CVE)

TuxCare rebuilt @babel/plugin-transform-modules-systemjs to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1784336946
Updated: 2026-11-02

OSVCLSA-2026-1784509777 No score

TuxCare security update for @babel/plugin-transform-modules-systemjs (1 CVE)

TuxCare rebuilt @babel/plugin-transform-modules-systemjs to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1784509777
Updated: 2026-11-02

OSVCLSA-2026-1784509815 No score

TuxCare security update for @babel/plugin-transform-modules-systemjs (1 CVE)

TuxCare rebuilt @babel/plugin-transform-modules-systemjs to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1784509815
Updated: 2026-11-02

OSVCLSA-2026-1790161979 No score

TuxCare security update for @babel/plugin-transform-modules-systemjs (1 CVE)

TuxCare rebuilt @babel/plugin-transform-modules-systemjs to address 1 CVE. Fixed in 7.23.0-tuxcare.1.

Record: CLSA-2026-1790161979
Updated: 2026-11-02

OSVCLSA-2026-1792160961 No score

TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792160961
Updated: 2026-11-02

OSVCLSA-2026-1792161418 No score

TuxCare security update for @babel/code-frame (1 CVE)

TuxCare rebuilt @babel/code-frame to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161418
Updated: 2026-11-02

OSVCLSA-2026-1792161419 No score

TuxCare security update for @babel/code-frame (1 CVE)

TuxCare rebuilt @babel/code-frame to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792161419
Updated: 2026-11-02

OSVCLSA-2026-1792161420 No score

TuxCare security update for @babel/code-frame (1 CVE)

TuxCare rebuilt @babel/code-frame to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161420
Updated: 2026-11-02

OSVCLSA-2026-1792161615 No score

TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161615
Updated: 2026-11-02

OSVCLSA-2026-1792161616 No score

TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792161616
Updated: 2026-11-02

OSVCLSA-2026-1792161617 No score

TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161617
Updated: 2026-11-02

OSVCLSA-2026-1792161631 No score

TuxCare security update for @babel/core (1 CVE)

TuxCare rebuilt @babel/core to address 1 CVE. Fixed in 7.23.0-tuxcare.1.

Record: CLSA-2026-1792161631
Updated: 2026-11-02

OSVCLSA-2026-1792161666 No score

TuxCare security update for @babel/eslint-parser (1 CVE)

TuxCare rebuilt @babel/eslint-parser to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161666
Updated: 2026-11-02

OSVCLSA-2026-1792161730 No score

TuxCare security update for @babel/generator (1 CVE)

TuxCare rebuilt @babel/generator to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161730
Updated: 2026-11-02

OSVCLSA-2026-1792161731 No score

TuxCare security update for @babel/generator (1 CVE)

TuxCare rebuilt @babel/generator to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792161731
Updated: 2026-11-02

OSVCLSA-2026-1792161732 No score

TuxCare security update for @babel/generator (1 CVE)

TuxCare rebuilt @babel/generator to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161732
Updated: 2026-11-02

OSVCLSA-2026-1792161743 No score

TuxCare security update for @babel/generator (2 CVEs)

TuxCare rebuilt @babel/generator to address 2 CVEs. Fixed in 7.23.0-tuxcare.1.

Record: CLSA-2026-1792161743
Updated: 2026-11-02

OSVCLSA-2026-1792161886 No score

TuxCare security update for @babel/parser (1 CVE)

TuxCare rebuilt @babel/parser to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161886
Updated: 2026-11-02

OSVCLSA-2026-1792161887 No score

TuxCare security update for @babel/parser (1 CVE)

TuxCare rebuilt @babel/parser to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792161887
Updated: 2026-11-02

OSVCLSA-2026-1792161888 No score

TuxCare security update for @babel/parser (1 CVE)

TuxCare rebuilt @babel/parser to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161888
Updated: 2026-11-02

OSVCLSA-2026-1792161898 No score

TuxCare security update for @babel/parser (2 CVEs)

TuxCare rebuilt @babel/parser to address 2 CVEs. Fixed in 7.23.0-tuxcare.1.

Record: CLSA-2026-1792161898
Updated: 2026-11-02

OSVCLSA-2026-1792161951 No score

TuxCare security update for @babel/plugin-proposal-class-properties (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-class-properties to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161951
Updated: 2026-11-02

OSVCLSA-2026-1792161983 No score

TuxCare security update for @babel/plugin-proposal-decorators (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792161983
Updated: 2026-11-02

OSVCLSA-2026-1792161984 No score

TuxCare security update for @babel/plugin-proposal-decorators (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792161984
Updated: 2026-11-02

OSVCLSA-2026-1792161985 No score

TuxCare security update for @babel/plugin-proposal-decorators (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-decorators to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792161985
Updated: 2026-11-02

OSVCLSA-2026-1792162020 No score

TuxCare security update for @babel/plugin-proposal-nullish-coalescing-operator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162020
Updated: 2026-11-02

OSVCLSA-2026-1792162021 No score

TuxCare security update for @babel/plugin-proposal-nullish-coalescing-operator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-nullish-coalescing-operator to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162021
Updated: 2026-11-02

OSVCLSA-2026-1792162045 No score

TuxCare security update for @babel/plugin-proposal-numeric-separator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162045
Updated: 2026-11-02

OSVCLSA-2026-1792162046 No score

TuxCare security update for @babel/plugin-proposal-numeric-separator (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-numeric-separator to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162046
Updated: 2026-11-02

OSVCLSA-2026-1792162069 No score

TuxCare security update for @babel/plugin-proposal-optional-chaining (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162069
Updated: 2026-11-02

OSVCLSA-2026-1792162070 No score

TuxCare security update for @babel/plugin-proposal-optional-chaining (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-optional-chaining to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162070
Updated: 2026-11-02

OSVCLSA-2026-1792162089 No score

TuxCare security update for @babel/plugin-transform-flow-strip-types (1 CVE)

TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162089
Updated: 2026-11-02

OSVCLSA-2026-1792162090 No score

TuxCare security update for @babel/plugin-transform-flow-strip-types (1 CVE)

TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792162090
Updated: 2026-11-02

OSVCLSA-2026-1792162091 No score

TuxCare security update for @babel/plugin-transform-flow-strip-types (1 CVE)

TuxCare rebuilt @babel/plugin-transform-flow-strip-types to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162091
Updated: 2026-11-02

OSVCLSA-2026-1792162113 No score

TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162113
Updated: 2026-11-02

OSVCLSA-2026-1792162114 No score

TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792162114
Updated: 2026-11-02

OSVCLSA-2026-1792162115 No score

TuxCare security update for @babel/plugin-transform-object-assign (1 CVE)

TuxCare rebuilt @babel/plugin-transform-object-assign to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162115
Updated: 2026-11-02

OSVCLSA-2026-1792162136 No score

TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162136
Updated: 2026-11-02

OSVCLSA-2026-1792162138 No score

TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792162138
Updated: 2026-11-02

OSVCLSA-2026-1792162139 No score

TuxCare security update for @babel/plugin-transform-react-display-name (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-display-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162139
Updated: 2026-11-02

OSVCLSA-2026-1792162156 No score

TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162156
Updated: 2026-11-02

OSVCLSA-2026-1792162157 No score

TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792162157
Updated: 2026-11-02

OSVCLSA-2026-1792162158 No score

TuxCare security update for @babel/plugin-transform-react-jsx (1 CVE)

TuxCare rebuilt @babel/plugin-transform-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162158
Updated: 2026-11-02

OSVCLSA-2026-1792162178 No score

TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.18.9-tuxcare.2.

Record: CLSA-2026-1792162178
Updated: 2026-11-02

OSVCLSA-2026-1792162179 No score

TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.29.0-tuxcare.1.

Record: CLSA-2026-1792162179
Updated: 2026-11-02

OSVCLSA-2026-1792162180 No score

TuxCare security update for @babel/preset-react (1 CVE)

TuxCare rebuilt @babel/preset-react to address 1 CVE. Fixed in 7.12.18-tuxcare.2.

Record: CLSA-2026-1792162180
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`@babel/plugin-transform-modules-systemjs` npm	7.12.0 to 7.29.3	7.29.4
`@babel/plugin-transform-modules-systemjs` npm	8.0.0-alpha.0 to 8.0.0-alpha.12	8.0.0-alpha.13
`@babel/plugin-transform-modules-systemjs` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-modules-systemjs` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-modules-systemjs` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-transform-modules-systemjs` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-proposal-class-properties` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/code-frame` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/code-frame` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/code-frame` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2

Show 204 moreShow less

Affected packages
Package	Affected	Fixed
`@babel/core` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/core` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/core` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/core` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/eslint-parser` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/generator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/generator` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/generator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/generator` TuxCare:npm From an advisory covering 2 CVEs	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/parser` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/parser` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/parser` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/parser` TuxCare:npm From an advisory covering 2 CVEs	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-proposal-class-properties` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-proposal-decorators` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-decorators` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-proposal-decorators` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-proposal-nullish-coalescing-operator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-nullish-coalescing-operator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-proposal-numeric-separator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-numeric-separator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-proposal-optional-chaining` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-optional-chaining` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-transform-flow-strip-types` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-flow-strip-types` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-flow-strip-types` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-transform-object-assign` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-object-assign` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-object-assign` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-transform-react-display-name` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-react-display-name` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-react-display-name` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/plugin-transform-react-jsx` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-react-jsx` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-react-jsx` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/preset-react` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/preset-react` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/preset-react` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/traverse` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/traverse` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/traverse` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/types` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/types` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/types` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.187.12.18-tuxcare.1	7.12.18-tuxcare.2
`@babel/types` TuxCare:npm From an advisory covering 2 CVEs	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-transform-runtime` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-runtime` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-runtime` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-exponentiation-operator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-exponentiation-operator` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-exponentiation-operator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/preset-typescript` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/preset-typescript` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/preset-typescript` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-template-literals` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-template-literals` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-template-literals` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-shorthand-properties` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-shorthand-properties` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-shorthand-properties` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-object-rest-spread` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-nullish-coalescing-operator` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-create-regexp-features-plugin` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-create-regexp-features-plugin` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-create-regexp-features-plugin` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-builder-binary-assignment-operator-visitor` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-builder-binary-assignment-operator-visitor` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-class-static-block` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-wrap-function` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-wrap-function` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-wrap-function` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-hoist-variables` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-hoist-variables` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-get-function-arity` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-explode-assignable-expression` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-explode-assignable-expression` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-export-namespace-from` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/register` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/register` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/register` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-compilation-targets` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-compilation-targets` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-compilation-targets` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-plugin-utils` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-plugin-utils` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-plugin-utils` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-module-transforms` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-module-transforms` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-module-transforms` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-module-transforms` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-syntax-typescript` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-syntax-typescript` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-syntax-typescript` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-block-scoped-functions` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-block-scoped-functions` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-block-scoped-functions` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-builder-react-jsx` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-builder-react-jsx` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-builder-react-jsx` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-unicode-regex` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-unicode-regex` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-unicode-regex` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-typescript` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-typescript` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-typescript` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-react-jsx-self` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-react-jsx-self` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-react-jsx-self` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/runtime-corejs3` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/runtime-corejs3` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/runtime-corejs3` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/runtime-corejs2` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/runtime-corejs2` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/runtime-corejs2` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-sticky-regex` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-sticky-regex` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-sticky-regex` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-spread` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-spread` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-spread` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-for-of` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-for-of` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-for-of` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-classes` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-classes` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-classes` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-regenerator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-regenerator` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-regenerator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-react-jsx-source` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-react-jsx-source` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-react-jsx-source` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-block-scoping` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-block-scoping` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-transform-private-property-in-object` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-destructuring` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-destructuring` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-destructuring` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-destructuring` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/helper-member-expression-to-functions` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-member-expression-to-functions` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-member-expression-to-functions` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-member-expression-to-functions` TuxCare:npm From an advisory covering 2 CVEs	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-syntax-export-default-from` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-syntax-export-default-from` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-syntax-export-default-from` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-computed-properties` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-computed-properties` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-computed-properties` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-private-methods` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-optional-chaining` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-optional-chaining` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-transform-optional-catch-binding` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-syntax-flow` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-syntax-flow` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-syntax-flow` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-create-class-features-plugin` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-create-class-features-plugin` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-create-class-features-plugin` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-function-name` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-function-name` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-function-name` TuxCare:npm From an advisory covering 2 CVEs	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-transform-modules-commonjs` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-modules-commonjs` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-modules-commonjs` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-modules-commonjs` TuxCare:npm	7.23.0-tuxcare.0 up to 7.23.0-tuxcare.1, plus listed versions 7.23.0	7.23.0-tuxcare.1
`@babel/plugin-transform-arrow-functions` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-arrow-functions` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-arrow-functions` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-async-generator-functions` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-proposal-async-generator-functions` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-literals` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-literals` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-literals` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-replace-supers` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-replace-supers` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-replace-supers` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-function-name` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-transform-function-name` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-function-name` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-async-to-generator` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/plugin-transform-async-to-generator` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-async-to-generator` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-define-map` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-define-map` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-optional-catch-binding` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/plugin-proposal-optional-catch-binding` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-call-delegate` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/helper-optimise-call-expression` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`@babel/helper-optimise-call-expression` TuxCare:npm	7.18.9-tuxcare.0 up to 7.18.9-tuxcare.2, plus listed versions 7.18.97.18.9-tuxcare.1	7.18.9-tuxcare.2
`@babel/helper-optimise-call-expression` TuxCare:npm	7.12.18-tuxcare.0 up to 7.12.18-tuxcare.2, plus listed versions 7.12.18	7.12.18-tuxcare.2
`@babel/plugin-transform-named-capturing-groups-regex` TuxCare:npm	7.29.0-tuxcare.0 up to 7.29.0-tuxcare.1, plus listed versions 7.29.0	7.29.0-tuxcare.1
`node-babel7` Debian:12	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-107.20.15+ds1+~cs214.269.168-117.20.15+ds1+~cs214.269.168-127.20.15+ds1+~cs214.269.168-137.20.15+ds1+~cs214.269.168-14 Show 17 moreShow less 7.20.15+ds1+~cs214.269.168-157.20.15+ds1+~cs214.269.168-167.20.15+ds1+~cs214.269.168-177.20.15+ds1+~cs214.269.168-187.20.15+ds1+~cs214.269.168-37.20.15+ds1+~cs214.269.168-3+deb12u17.20.15+ds1+~cs214.269.168-3+deb12u27.20.15+ds1+~cs214.269.168-47.20.15+ds1+~cs214.269.168-57.20.15+ds1+~cs214.269.168-67.20.15+ds1+~cs214.269.168-77.20.15+ds1+~cs214.269.168-87.20.15+ds1+~cs214.269.168-98.0.4+ds1+~cs177.303.116-18.0.4+ds1+~cs177.303.116-28.0.4+ds1+~cs177.303.116-38.0.6+ds1+~cs177.303.116-1	None known
`node-babel7` Debian:13	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-107.20.15+ds1+~cs214.269.168-117.20.15+ds1+~cs214.269.168-127.20.15+ds1+~cs214.269.168-137.20.15+ds1+~cs214.269.168-14 Show 10 moreShow less 7.20.15+ds1+~cs214.269.168-157.20.15+ds1+~cs214.269.168-167.20.15+ds1+~cs214.269.168-177.20.15+ds1+~cs214.269.168-187.20.15+ds1+~cs214.269.168-87.20.15+ds1+~cs214.269.168-98.0.4+ds1+~cs177.303.116-18.0.4+ds1+~cs177.303.116-28.0.4+ds1+~cs177.303.116-38.0.6+ds1+~cs177.303.116-1	None known
`node-babel7` Debian:14	before 8.0.4+ds1+~cs177.303.116-2, plus listed versions 7.20.15+ds1+~cs214.269.168-107.20.15+ds1+~cs214.269.168-117.20.15+ds1+~cs214.269.168-127.20.15+ds1+~cs214.269.168-137.20.15+ds1+~cs214.269.168-14 Show 7 moreShow less 7.20.15+ds1+~cs214.269.168-157.20.15+ds1+~cs214.269.168-167.20.15+ds1+~cs214.269.168-177.20.15+ds1+~cs214.269.168-187.20.15+ds1+~cs214.269.168-87.20.15+ds1+~cs214.269.168-98.0.4+ds1+~cs177.303.116-1	8.0.4+ds1+~cs177.303.116-2
`@babel/plugin-transform-modules-systemjs` npm	7.12.0 up to 7.29.4	7.29.4
`@babel/plugin-transform-modules-systemjs` npm	8.0.0-alpha.0 up to 8.0.0-alpha.13	8.0.0-alpha.13
`@babel/plugin-transform-modules-systemjs` Root:npm	before 7.27.1-aikido.2	7.27.1-aikido.27.28.5-aikido.27.12.1-aikido.17.25.9-aikido.27.24.1-aikido.17.16.7-aikido.17.23.3-aikido.17.20.11-aikido.1
`@rootio/babel__plugin-transform-modules-systemjs` Root:npm	before 7.27.1-root.io.1	7.27.1-root.io.17.28.5-root.io.17.27.1-root.io.27.28.5-root.io.27.12.1-root.io.17.25.9-root.io.27.24.1-root.io.17.16.7-root.io.17.23.3-root.io.17.20.11-root.io.1
`node-babel7` Ubuntu:22.04:LTS	All versions, plus listed versions 7.12.12+~cs150.141.84-67.12.12+~cs150.141.84-77.12.12+~cs150.141.84-8	None known
`node-babel7` Ubuntu:24.04:LTS	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-47.20.15+ds1+~cs214.269.168-57.20.15+ds1+~cs214.269.168-67.20.15+ds1+~cs214.269.168-6build1	None known
`node-babel7` Ubuntu:25.10	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-8	None known
`node-babel7` Ubuntu:26.10	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-167.20.15+ds1+~cs214.269.168-17build17.20.15+ds1+~cs214.269.168-17build27.20.15+ds1+~cs214.269.168-18	None known
`node-babel7` Ubuntu:26.04:LTS	All versions, plus listed versions 7.20.15+ds1+~cs214.269.168-87.20.15+ds1+~cs214.269.168-97.20.15+ds1+~cs214.269.168-11build17.20.15+ds1+~cs214.269.168-147.20.15+ds1+~cs214.269.168-16	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	affected, affected_more	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-44728 is a high vulnerability (CVSS 8.2) in @babel Plugin-transform-modules-systemjs, published May 8, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 2nd percentile. Fixed in @babel/plugin-transform-modules-systemjs 7.29.4.

References

This page doesn't list everything

Also not on the record: 183 aliases and 78 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 233 source records.