npm Package Vulnerabilities

All 2,698 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,701 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 501.jszip2 CVEs
  2. 502.karma2 CVEs
  3. 503.keyget2 CVEs
  4. 504.@keystone-6/auth2 CVEs
  5. 505.kindeditor2 CVEs
  6. 506.@kindspells/astro-shield2 CVEs
  7. 507.knex2 CVEs
  8. 508.kysely2 CVEs
  9. 509.langchain2 CVEs
  10. 510.launch-editor2 CVEs
  11. 511.libnested2 CVEs
  12. 512.@libp2p/gossipsub2 CVEs
  13. 513.libxmljs22 CVEs
  14. 514.linkify-it2 CVEs
  15. 515.link-preview-js2 CVEs
  16. 516.localhost-now2 CVEs
  17. 517.lodash-template2 CVEs
  18. 518.lodash.template2 CVEs
  19. 519.lodash.unset2 CVEs
  20. 520.madlib-object-utils2 CVEs
  21. 521.mapbox.js2 CVEs
  22. 522.markdown-pdf2 CVEs
  23. 523.mathjax2 CVEs
  24. 524.matrix-appservice-bridge2 CVEs
  25. 525.mcstatic2 CVEs
  26. 526.md-to-pdf2 CVEs
  27. 527.mercurius2 CVEs
  28. 528.merge2 CVEs
  29. 529.merge-deep2 CVEs
  30. 530.@mikro-orm/core2 CVEs
  31. 531.minimist2 CVEs
  32. 532.misskey-js2 CVEs
  33. 533.mixin-deep2 CVEs
  34. 534.mjml2 CVEs
  35. 535.@mobilenext/mobile-mcp2 CVEs
  36. 536.@modelcontextprotocol/inspector2 CVEs
  37. 537.@modelcontextprotocol/server-filesystem2 CVEs
  38. 538.mootools2 CVEs
  39. 539.morgan2 CVEs
  40. 540.mout2 CVEs
  41. 541.mpath2 CVEs
  42. 542.mppx2 CVEs
  43. 543.mqtt-packet2 CVEs
  44. 544.ms2 CVEs
  45. 545.m-server2 CVEs
  46. 546.msrcrypto2 CVEs
  47. 547.multi-ini2 CVEs
  48. 548.mversion2 CVEs
  49. 549.mysql2 CVEs
  50. 550.nanoid2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →