Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 to compile regular expression named capturing groups, Babel will generate a polyfill for the .replace method that has quadratic complexity on some specific replacement pattern strings (i.e. the second argument passed to .replace). Generated code is vulnerable if all the following conditions are true: Using Babel to compile regular expression named capturing groups, using the .replace method on a regular expression that contains named capturing groups, and the code using untrusted strings as the second argument of .replace. This problem has been fixed in @babel/helpers and @babel/runtime 7.26.10 and 8.0.0-alpha.17. It's likely that individual users do not directly depend on @babel/helpers, and instead depend on @babel/core (which itself depends on @babel/helpers). Upgrading to @babel/core 7.26.10 is not required, but it guarantees use of a new enough @babel/helpers version. Note that just updating Babel dependencies is not enough; one will also need to re-compile the code. No known workarounds are available.
{
"binaries": [
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-cli"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-code-frame"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-core"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-generator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-bindify-decorators"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-builder-binary-assignment-operator-visitor"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-builder-react-jsx"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-call-delegate"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-define-map"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-explode-assignable-expression"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-explode-class"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-function-name"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-get-function-arity"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-hoist-variables"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-optimise-call-expression"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-regex"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-remap-async-to-generator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helper-replace-supers"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-helpers"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-messages"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-external-helpers"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-async-functions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-async-generators"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-class-constructor-call"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-class-properties"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-decorators"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-do-expressions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-dynamic-import"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-exponentiation-operator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-export-extensions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-flow"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-function-bind"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-jsx"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-object-rest-spread"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-syntax-trailing-function-commas"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-async-generator-functions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-async-to-generator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-class-constructor-call"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-class-properties"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-decorators"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-do-expressions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-es3-member-expression-literals"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-es3-property-literals"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-exponentiation-operator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-export-extensions"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-flow-strip-types"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-function-bind"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-jscript"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-object-rest-spread"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-proto-to-assign"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-react-display-name"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-react-jsx"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-react-jsx-self"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-react-jsx-source"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-regenerator"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-runtime"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-plugin-transform-strict-mode"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-polyfill"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-es2015"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-es2016"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-es2017"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-flow"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-latest"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-react"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-stage-0"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-stage-1"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-stage-2"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-preset-stage-3"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-register"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-runtime"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-template"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-traverse"
},
{
"binary_version": "6.26.0+dfsg-3build6",
"binary_name": "node-babel-types"
}
]
}
{
"binaries": [
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-cli"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-code-frame"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-core"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-generator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-bindify-decorators"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-builder-binary-assignment-operator-visitor"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-builder-react-jsx"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-call-delegate"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-define-map"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-explode-assignable-expression"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-explode-class"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-function-name"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-get-function-arity"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-hoist-variables"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-optimise-call-expression"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-regex"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-remap-async-to-generator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helper-replace-supers"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-helpers"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-messages"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-external-helpers"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-async-functions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-async-generators"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-class-constructor-call"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-class-properties"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-decorators"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-do-expressions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-dynamic-import"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-exponentiation-operator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-export-extensions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-flow"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-function-bind"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-jsx"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-object-rest-spread"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-syntax-trailing-function-commas"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-async-generator-functions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-async-to-generator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-class-constructor-call"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-class-properties"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-decorators"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-do-expressions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-es3-member-expression-literals"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-es3-property-literals"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-exponentiation-operator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-export-extensions"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-flow-strip-types"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-function-bind"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-jscript"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-object-rest-spread"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-proto-to-assign"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-react-display-name"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-react-jsx"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-react-jsx-self"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-react-jsx-source"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-regenerator"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-runtime"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-plugin-transform-strict-mode"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-polyfill"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-es2015"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-es2016"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-es2017"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-flow"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-latest"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-react"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-stage-0"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-stage-1"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-stage-2"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-preset-stage-3"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-register"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-runtime"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-template"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-traverse"
},
{
"binary_version": "6.26.0+repack-3",
"binary_name": "node-babel-types"
}
]
}
{
"binaries": [
{
"binary_version": "7.20.15+ds1+~cs214.269.168-6build1",
"binary_name": "node-babel7"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-6build1",
"binary_name": "node-babel7-debug"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-6build1",
"binary_name": "node-babel7-runtime"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-6build1",
"binary_name": "node-babel7-standalone"
}
]
}
{
"binaries": [
{
"binary_version": "7.20.15+ds1+~cs214.269.168-8",
"binary_name": "node-babel7"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-8",
"binary_name": "node-babel7-debug"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-8",
"binary_name": "node-babel7-runtime"
},
{
"binary_version": "7.20.15+ds1+~cs214.269.168-8",
"binary_name": "node-babel7-standalone"
}
]
}