Approved changes feed: RSS · Atom

cpe:2.3:a:@babel:plugin-transform-modules-systemjs:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor@Babel (4274a16f-2a95-56b6-9b47-579316f25283)
ProductPlugin Transform Modules Systemjs (f99480bb-da81-582c-8183-0a9bf2de5d94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44728 vulnerable 2026-06-03 15:25:03.398727 Improper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs
HIGH (8.2)
Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and 8.0.0-alpha.13.
Published: 2026-05-26T17:48:57.603Z
Updated: 2026-05-28T03:55:38.825Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.