Upgrade @babel/runtime to version 7.26.10 or later.

[slievrly]

Check Ahead

• I have searched the issues of this repository and believe that this is not a duplicate.

• I am willing to try to fix this bug myself.

Ⅰ. Issue Description

Upgrade @babel/runtime to version 7.26.10 or later in console/src/main/resources/static/console-fe/package-lock.json

Affected versions: < 7.26.10
Fixed versions: 7.26.10

CVE-2025-27789

Ⅱ. Describe what happened

No response

Ⅲ. Describe what you expected to happen

No response

Ⅳ. How to reproduce it (as minimally and precisely as possible)

No response

Ⅴ. Anything else we need to know?

No response

Ⅵ. Environment

No response

[jihun4452]

Can I try fixing this issue?

[xingfudeshi]

Can I try fixing this issue?

It's assigned to you.

[jihun4452]

I checked the 2.x branch, and it looks like @babel/runtime in console-fe/package-lock.json already resolves to 7.27.0 (>= 7.26.10).

So this seems already addressed, but I might be wrong. Could you please confirm and let me know if any further action is required?

[xingfudeshi]

I checked the 2.x branch, and it looks like @babel/runtime in console-fe/package-lock.json already resolves to 7.27.0 (>= 7.26.10).

So this seems already addressed, but I might be wrong. Could you please confirm and let me know if any further action is required?

@jihun4452
Yes. You are right.
The command npm ls @babel/runtime shows the installed version of babel/runtime is 7.27.0. However, I noticed that the direct dependency version defined in package.json for babel/runtime is still ^7.26.10. To avoid potient risk, can you submit a PR to update it?Thank you!

├─┬ @alicloud/console-components-app-layout@1.1.4
│ └── @babel/runtime@7.27.0 deduped
├─┬ @alicloud/console-components-console-menu@1.2.12
│ ├── @babel/runtime@7.27.0 deduped
│ └─┬ dva@2.4.1
│   ├── @babel/runtime@7.0.0-beta.46
│   └─┬ dva-core@1.4.0
│     └── @babel/runtime@7.0.0-beta.46
├─┬ @alicloud/console-components@1.6.2
│ ├─┬ @alifd/next@1.24.18
│ │ ├─┬ @alifd/meet-react@2.9.9
│ │ │ ├─┬ driver-universal@3.5.0
│ │ │ │ ├─┬ driver-dom@2.2.2
│ │ │ │ │ └─┬ style-unit@3.0.5
│ │ │ │ │   └── @babel/runtime@7.27.0 deduped
│ │ │ │ └─┬ driver-weex@2.1.0
│ │ │ │   └─┬ style-unit@3.0.5
│ │ │ │     └── @babel/runtime@7.27.0 deduped
│ │ │ └─┬ universal-choose-image@1.3.0
│ │ │   └─┬ rax@1.2.3
│ │ │     └── @babel/runtime@7.27.0 deduped
│ │ └─┬ react-transition-group@2.9.0
│ │   └─┬ dom-helpers@3.4.0
│ │     └── @babel/runtime@7.27.0 deduped
│ └─┬ react-loading-skeleton@2.2.0
│   └─┬ @emotion/core@10.3.1
│     ├── @babel/runtime@7.27.0 deduped
│     └─┬ @emotion/css@10.0.27
│       └─┬ babel-plugin-emotion@10.2.2
│         └─┬ babel-plugin-macros@2.8.0
│           └── @babel/runtime@7.27.0 deduped
├─┬ @babel/preset-env@7.23.9
│ └─┬ @babel/plugin-transform-regenerator@7.23.3
│   └─┬ regenerator-transform@0.15.2
│     └── @babel/runtime@7.27.0 deduped
├── @babel/runtime@7.27.0
├─┬ @types/react-redux@7.1.33
│ └─┬ redux@4.2.1
│   └── @babel/runtime@7.27.0 deduped
├─┬ babel-preset-react-app@10.0.1
│ ├── @babel/runtime@7.27.0 deduped
│ └─┬ babel-plugin-macros@3.1.0
│   └── @babel/runtime@7.27.0 deduped
├─┬ eslint-config-ali@14.2.1
│ └─┬ eslint-config-egg@13.1.0
│   └─┬ eslint-plugin-jsx-a11y@6.8.0
│     └── @babel/runtime@7.27.0 deduped
├─┬ history@4.10.1
│ └── @babel/runtime@7.27.0 deduped
├─┬ react-redux@8.1.3
│ └── @babel/runtime@7.27.0 deduped
├─┬ react-router-dom@5.3.4
│ └── @babel/runtime@7.27.0 deduped
└─┬ react-router@5.3.4
  └── @babel/runtime@7.27.0 deduped