Babeljs Babel-Helper-Define-Polyfill-Provider vulnerabilities

1 known vulnerability affecting babeljs/babel-helper-define-polyfill-provider.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-45133HIGHCVSS 8.8fixed in 0.4.32023-10-12

CVE-2023-45133 [HIGH] CWE-184 CVE-2023-45133: Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-a Babel is a compiler for writingJavaScript. In `@babel/traverse` prior to versions 7.23.2 and 8.0.0-alpha.4 and all versions of `babel-traverse`, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the `path.evaluate()`or `path.evaluateTruthy()