Low3.6Red Hat Linux Updated
@babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment
CVE-2026-49356 Published Jun 22, 2026Updated by vendor Jun 22, 2026
Affected products & platforms
Red Hat LinuxUnclassified
Summary
@babel/core: @babel/core: Arbitrary file read via sourceMappingURL comment. Red Hat rates this low (CVSS 3.6). Weakness: CWE-22.
Affected versions
- < 8.0.0-rc
- < 7.29.6
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Fixed versions
- 8.0.0
- 7.29.6
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Do not process untrusted source maps with @babel/core in production services. Restrict access to developer UI components.
Official advisory · high-confidence parse· fetched 7 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.