Skip to content
Threat Feed

Product

@Babel/Preset-Env

1 brief RSS
high advisory

Babel Plugin Vulnerability Leads to Arbitrary Code Execution via Malicious Input

A maliciously crafted input to Babel's `@babel/plugin-transform-modules-systemjs` or `@babel/preset-env` with `modules: 'systemjs'` can cause the tool to generate arbitrary code execution.

@babel/plugin-transform-modules-systemjs +1 code-generation arbitrary-code-execution babel
2r 1t