Search: CVE-2026-49356

A vulnerability in @babel/core prior to version 7.29.6 allows an attacker who controls input source code and can read the output source code to read arbitrary source map files on the system running Babel. This requires the attacker to know the path of the source map file they want to access. Users compiling only trusted code are not affected. The issue is fixed in @babel/core version 7.29.6 and later.