CVE-2023-45133: Critical security vulnerability in Babel, a popular JavaScript transpiler - #CVE-2023-45133
A critical vulnerability (CVE-2023-45133) was discovered in Babel, a popular JavaScript transpiler, with a CVSS score of 9.3. The vulnerability can allow attackers to execute arbitrary code during compilation of malicious code. The issue arises from certain plugins relying on internal Babel methods. Affected plugins include '@babel/plugin-transform-runtime', '@babel/preset-env', and polyfill provider plugins using '@babel/helper-define-polyfill-provider'. Only compiling trusted code avoids impact. A fix was released in '@babel/traverse@7.23.2'. Upgrading to that version and updating affected packages secures systems.