npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 501.converse.js2 CVEs
  2. 502.cordova-plugin-inappbrowser2 CVEs
  3. 503.crud-file-server2 CVEs
  4. 504.css-what2 CVEs
  5. 505.csv-parse2 CVEs
  6. 506.@cubejs-backend/api-gateway2 CVEs
  7. 507.@cubejs-backend/server-core2 CVEs
  8. 508.@cyclonedx/cyclonedx-npm2 CVEs
  9. 509.datatables.net2 CVEs
  10. 510.dbgate-api2 CVEs
  11. 511.dbgate-web2 CVEs
  12. 512.dd-trace2 CVEs
  13. 513.decal2 CVEs
  14. 514.deep-get-set2 CVEs
  15. 515.deephas2 CVEs
  16. 516.deepmerge-ts2 CVEs
  17. 517.@deepstream/server2 CVEs
  18. 518.defaults-deep2 CVEs
  19. 519.defuddle2 CVEs
  20. 520.@dependencytrack/frontend2 CVEs
  21. 521.detect-character-encoding2 CVEs
  22. 522.devcert2 CVEs
  23. 523.@dicebear/converter2 CVEs
  24. 524.@dicebear/core2 CVEs
  25. 525.@dicebear/initials2 CVEs
  26. 526.dijit2 CVEs
  27. 527.@directus/app2 CVEs
  28. 528.@directus/storage-driver-s32 CVEs
  29. 529.@discordjs/opus2 CVEs
  30. 530.dottie2 CVEs
  31. 531.dotty2 CVEs
  32. 532.droppy2 CVEs
  33. 533.effect2 CVEs
  34. 534.electron-markdownify2 CVEs
  35. 535.element-plus2 CVEs
  36. 536.enclave-vm2 CVEs
  37. 537.@enclave-vm/core2 CVEs
  38. 538.@enderfga/claw-orchestrator2 CVEs
  39. 539.@ensdomains/ens-contracts2 CVEs
  40. 540.eta2 CVEs
  41. 541.@excalidraw/excalidraw2 CVEs
  42. 542.expo2 CVEs
  43. 543.express-fileupload2 CVEs
  44. 544.express-gateway2 CVEs
  45. 545.express-openid-connect2 CVEs
  46. 546.expr-eval-fork2 CVEs
  47. 547.extract-zip2 CVEs
  48. 548.fabric2 CVEs
  49. 549.fast-filesystem-mcp2 CVEs
  50. 550.fastify-csrf2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →