Nixpkgs security tracker

Login with GitHub

Suggestions search

Dismissed
Filter by:
With package: babeld

Found 1 matching suggestions

View:
Compact
Detailed
Dismissed
(not in Nixpkgs)
Permalink CVE-2026-49356
3.2 LOW
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
updated 1 month ago by @LeSuisse Activity log
  • Created suggestion 1 month ago
  • @LeSuisse dismissed (not in Nixpkgs) 1 month ago
Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core

Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is running Babel, if the attacker controls the input source code, can read the output source code, and knows the path of the source map file that they want to read. This vulnerability is fixed in 8.0.0-rc.6 and 7.29.6.

Affected products

babel
  • ==< 7.29.6
  • ==>= 8.0.0-alpha.0, < 8.0.0-rc.5

Matching in nixpkgs

pkgs.babeldoc

PDF scientific paper translation and bilingual comparison library

pkgs.gpsbabel

Convert, upload and download data from GPS and Map programs

pkgs.babeltrace

Command-line tool and library to read and convert LTTng tracefiles

pkgs.babeltrace2

Babeltrace /ˈbæbəltreɪs/ is an open-source trace manipulation toolkit

pkgs.gpsbabel-gui

Convert, upload and download data from GPS and Map programs

Package maintainers