Severity: Critical: Babel-Traverse Vulnerability

[RosadoJ]

babel-traverse *
Severity: critical
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code - GHSA-67hx-6x53-jw92
No fix available
node_modules/babel-traverse
babel-template *
Depends on vulnerable versions of babel-traverse
node_modules/babel-template
babel-plugin-transform-builtin-extend *
Depends on vulnerable versions of babel-template
node_modules/babel-plugin-transform-builtin-extend

[ZEROF]

HI,

The vulnerability has been fixed in @babel/traverse@7.23.2.

[GCHQDeveloper581]

This was addressed by the removal of babel-plugin-transform-builtin-extend in #2204.