Root has patched CVE-2026-44728 in the @rootio/babel__plugin-transform-modules-systemjs package for Root:npm. Multiple fixed versions available.
{
"distro_version": "",
"distro": "npm",
"severity": "HIGH",
"source": "Root"
}""
"7.25.9-root.io.1"
true
[
"7.27.1-root.io.1",
"7.28.5-root.io.1",
"7.27.1-root.io.2",
"7.28.5-root.io.2",
"7.25.9-root.io.1"
]
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-44728.json"
5.0