7 ms·

This appears to be using a version of babel that allows ACE FYI. @babel/traverse <7.23.2 https://github.com/advisories/GHSA-67hx-6x53-jw92 https://github.com/

• throw213789121 2y ago
  [flagged]
• lioeters 2y ago
  > Users that only compile trusted code are not impacted. Doesn't Babel typically only compile your source code, and not what's in node_modules? I guess it depends if you're compiling single files, leaving import statements as they are; or creating a single bundle for the browser that includes external dependencies. For the latter, I imagine there's a chance some malicious package could exploit this.