SIGN IN SIGN UP
facebook / react-native UNCLAIMED

A framework for building native applications using React

0 0 151 C++

Bump @babel/plugin-transform-modules-systemjs to fix CVE-2026-44728 (#56775)

Summary:
Pull Request resolved: https://github.com/facebook/react-native/pull/56775

babel/plugin-transform-modules-systemjs versions >= 7.12.0 and <= 7.29.3 are affected by CVE-2026-44728 (GHSA-fv7c-fp4j-7gwp), a HIGH severity vulnerability. The react-native repo resolves this package at 7.25.9 via babel/preset-env. This adds a Yarn resolution to force the package to ^7.29.4, the first patched version.

#Changelog: [Internal]
[General] - Bump `babel/plugin-transform-modules-systemjs` to 7.29.4

Reviewed By: robhogan

Differential Revision: D104687110

fbshipit-source-id: ce95afcae024d6ea2a83eae9067d3ab3fd3baa0c
C
Calix Tang committed
497177f3d23bf060bf886b02fb92353dd5808d15
Parent: e2936cb
Committed by meta-codesync[bot] <215208954+meta-codesync[bot]@users.noreply.github.com> on 5/11/2026, 8:13:41 PM