HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-44728 — Babel is a compiler for writing next generation JavaScript. From 7.12.0 to befor...

·Source: NIST NVD

Updated:

Executive Summary

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and 8.0.0-alpha.13.

Analysis

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and 8.0.0-alpha.13. CVSS Score: 8.2. Published: 2026-05-26T18:16:50.880.

Indicators of Compromise (1)

CVE (1)
CVE-2026-44728
Source Attribution

Originally published by NIST NVD on May 26, 2026. Verified by: NIST.

Related Threats