CVE-2023-45133
CriticalAdvisory
Published 12 Oct 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.3
- base score, highest
- EPSS
- 0.005
- 43rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 134
- of 17,781 indexed, latest versions
- Container images
- 122
- deployed by those charts
- Fix available
- 1 of 3
- affected packages
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 122 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @babel/ | 7.0.0-beta.44, 7.4.3, 7.4.5, 7.5.5+41 more | 7.23.2 | 108 |
| babel-traversenpm | 6.21.0, 6.26.0 | no fix listed | 28 |
| node-babel7deb | 7.20.15+ds1+~cs214.269.168-6build1 | no fix listed | 1 |
- OSV records
- GHSA-67hx-6x53-jw92UBUNTU-CVE-2023-45133
Charts affected
134 by stars
Container images carrying it
122 by charts deploying them
A fixed version is listed for 1 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | a4a3639899f7 | @babel/ | 7.23.2 | 3 |
| amazon/ | c740d7a89475 | @babel/ | 7.23.2 | 2 |
| chatwoot/ | d530ab8c1753 | @babel/ | 7.23.2 | 2 |
| governify/ | 2987672448c7 | @babel/ | 7.23.2 | 2 |
| governify/ | d3f37f4f8168 | babel-traverse | no fix listed | 2 |
| gradiant/ | fbd10c017541 | babel-traverse | no fix listed | 2 |
| library/ | 1b23d7976f02 | @babel/ | 7.23.2 | 2 |
| moreillon/ | 9e578c9653b6 | @babel/ | 7.23.2 | 2 |
| moreillon/ | d5a0ec8394c0 | @babel/ | 7.23.2 | 2 |
| opensearchproject/ | 39695180364b | @babel/ | 7.23.2 | 2 |
| outlinewiki/ | d060dcd8f9aa | @babel/ babel-traverse | 7.23.2 no fix listed | 2 |
| requarks/ | 68f0d1848261 | @babel/ | 7.23.2 | 2 |
| stakater/ | 3f4926eedc74 | @babel/ | 7.23.2 | 2 |
| statsd/ | dab129e74c25 | @babel/ | 7.23.2 | 2 |
| ghcr.io/ | acb40032ad4b | @babel/ | 7.23.2 | 2 |
| amazon/ | 5126e2e79a1f | @babel/ | 7.23.2 | 1 |
| amundsendev/ | 69e7915e61c1 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| apimap/ | 406d3858e20c | @babel/ | 7.23.2 | 1 |
| apimap/ | 041a4790c65c | @babel/ | 7.23.2 | 1 |
| arfath29/ | 384b3e377f47 | @babel/ | 7.23.2 | 1 |
| assistiot/ | 2297b4350211 | @babel/ | 7.23.2 | 1 |
| assistiot/ | 0570b27bb7c2 | @babel/ | 7.23.2 | 1 |
| assistiot/ | f11d82defc70 | @babel/ | 7.23.2 | 1 |
| bicarus/ | dab88659ae3b | @babel/ | 7.23.2 | 1 |
| browserless/ | c81ae5585b47 | @babel/ | 7.23.2 | 1 |
| catalysm/ | f003b35f54d9 | babel-traverse | no fix listed | 1 |
| ccjacobs14/ | 9a9b14a6f09e | @babel/ | 7.23.2 | 1 |
| chatwoot/ | 67ebc751c171 | @babel/ | 7.23.2 | 1 |
| coderaiser/ | b34a9775c7ce | @babel/ | 7.23.2 | 1 |
| coldatom/ | 7c2fbbb41bcf | @babel/ | 7.23.2 | 1 |
| conduction/ | d591f5e6f2a9 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| dipugodocker/ | d431c37fe1cd | @babel/ | 7.23.2 | 1 |
| electerious/ | 5e7173fa321c | @babel/ | 7.23.2 | 1 |
| ethereumoptimism/ | e07968a0e686 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| ethersphere/ | 7624f11a72ad | babel-traverse | no fix listed | 1 |
| ethersphere/ | 513154aab230 | @babel/ | 7.23.2 | 1 |
| ethpandaops/ | 7a9ab6370657 | @babel/ | 7.23.2 | 1 |
| fallenbagel/ | 6dcdb5ba5091 | @babel/ | 7.23.2 | 1 |
| fiware/ | d551a13e8278 | babel-traverse | no fix listed | 1 |
| flagsmith/ | df02a29e8b0c | @babel/ | 7.23.2 | 1 |
| graphiteapp/ | 04a0037cc2ae | @babel/ | 7.23.2 | 1 |
| hecrom/ | 5454b54d5b28 | @babel/ | 7.23.2 | 1 |
| helga09/ | 7999bc8b77c0 | @babel/ | 7.23.2 | 1 |
| henrywhitaker3/ | 47159a940229 | @babel/ | 7.23.2 | 1 |
| heywood8/ | 0bc9ab313d37 | @babel/ | 7.23.2 | 1 |
| hkotel/ | 3c04c0e85039 | @babel/ | 7.23.2 | 1 |
| ibarreche/ | c8970ac1c8dc | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| ibmcom/ | e2a86997b36b | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| jayfong/ | 163e5d621910 | babel-traverse | no fix listed | 1 |
| joplin/ | 52af57880c0e | @babel/ | 7.23.2 | 1 |