@babel/core

8.0.7 · 7 Oct 2026MIT112.6M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @babel/core. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	8.0.7	No known advisory
	7.29.7	Safe from 7.29.6

Your version

Low
@babel/core: Arbitrary File Read via sourceMappingURL CommentGHSA-4x5r-pxfx-6jf8 · 15 Jun 2026
- 7.x7.0.0 – 7.29.0Fixed in 7.29.6

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.