[Bug] CVE-2025-27789: DOS Vulnerability in Babel

[jorlando-elucid]

Bug description

vtk.js depends on "@babel/runtime": "7.22.11"

Versions of @babel < 7.26.10 are vulnerable to CVE-2025-27789, a DOS condition due to improper handling of regex's.

Steps to reproduce

Inspect the package-lock.json file for the version of babel.

https://github.com/Kitware/vtk-js/blame/307ce4497ca0698b8934e79716db2c5a33f3a9a7/package-lock.json#L13

Detailed Behavior

No response

Expected Behavior

Update babel to remediate vulnerability

Environment

All

[floryst]

Thanks, we'll get that updated in the near future.

[daker]

Fixed in 3953b55