@babel/parser, the core JavaScript parser used by Babel, has two recent versions, 7.26.9 and 7.26.8. Both versions share the same MIT license and are maintained by the Babel team, residing in the packages/babel-parser directory of the main Babel repository on GitHub. They include similar development dependencies like charcodes, @babel/code-frame, @babel/helper-fixtures, @babel/helper-string-parser, @babel/helper-validator-identifier, and @babel/helper-check-duplicate-nodes, used for testing and internal utilities. The key difference lies in the dependencies. 7.26.9 depends on @babel/types version "^7.26.9", while 7.26.8 depends on "^7.26.8", it means that 7.26.9 uses the newest types definitions from babel itself. The unpacked size of version 7.26.9 is 1920519, slighlty bigger than the 1916324 of 7.26.8, suggesting minor improvements or bug fixes impacting the overall package size. The version 7.26.9 was released on "2025-02-14", almost one week after the 7.26.8 released on "2025-02-08". For developers using @babel/parser, upgrading from 7.26.8 to 7.26.9 should be a safe change, primarly updating related type definitions and some bug fixes. Check the release notes.
The are not vulnerabilities for the version 7.26.9 of the package @babel/parser