By vendor

Babel vulnerabilities

Known CVEs affecting Babel products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-49356LOW 3.2

  Babel, a widely used JavaScript compiler, contains a vulnerability that allows attackers to read arbitrary source map files from systems running the compiler. If an attacker can control the JavaScript code being compiled and see the compiler's output, they can craft malicious code containing a sourceMappingURL comment that tricks Babel into exposing source map files they know the path to. This is a low-severity issue because it requires multiple preconditions: the attacker must have input control, output visibility, and knowledge of the exact file path of the target source map.