Security Vulnerability Issue: @babel/traverse@7.22.5 CVE-2023-45133

[bursache]

Bug Description

Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code

Code snippets

Where the dependency is used:

src/special/gulp-load-plugins.js

Where the dependency is listed in package.json:

dependencies

Versions

• node -v: 18.17.0
• npm -v: 9.6.7
• depcheck --version: 1.4.6

Extra info

GitHub Advisory Database

[rumpl]

Thanks, reading the advisory it says Users that only compile trusted code are not impacted. and since users use depcheck to check their own code I guess this doesn't really impact our users. Would be nice to update though

[rumpl]

#843 was just merged, let me close this one