Vulnerability Description
Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and 8.0.0-alpha.13.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Babel | Babel | >= 7.12.0, < 7.29.4 |
Related Weaknesses (CWE)
References
- https://github.com/babel/babel/security/advisories/GHSA-fv7c-fp4j-7gwpMitigationVendor Advisory
FAQ
What is CVE-2026-44728?
CVE-2026-44728 is a vulnerability with a CVSS score of 8.2 (HIGH). Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to...
How severe is CVE-2026-44728?
CVE-2026-44728 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-44728?
Check the references section above for vendor advisories and patch information. Affected products include: Babel Babel.