npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.@fastify/multipart2 CVEs
  2. 552.fastify-multipart2 CVEs
  3. 553.@fastify/passport2 CVEs
  4. 554.fastify-static2 CVEs
  5. 555.@fastly/js-compute2 CVEs
  6. 556.fast-string-search2 CVEs
  7. 557.fast-xml-builder2 CVEs
  8. 558.@fedify/vocab-runtime2 CVEs
  9. 559.financejs2 CVEs
  10. 560.@finastra/nestjs-proxy2 CVEs
  11. 561.@finastra/ssr-pages2 CVEs
  12. 562.fiora2 CVEs
  13. 563.flatted2 CVEs
  14. 564.flowise-ui2 CVEs
  15. 565.form-data2 CVEs
  16. 566.formio2 CVEs
  17. 567.forms2 CVEs
  18. 568.@frontmcp/adapters2 CVEs
  19. 569.ftp-srv2 CVEs
  20. 570.fullpage.js2 CVEs
  21. 571.generator-jhipster-kotlin2 CVEs
  22. 572.genieacs2 CVEs
  23. 573.ggit2 CVEs
  24. 574.gitbook2 CVEs
  25. 575.@github/copilot2 CVEs
  26. 576.@gitlawb/openclaude2 CVEs
  27. 577.glob2 CVEs
  28. 578.glob-parent2 CVEs
  29. 579.@google/gemini-cli2 CVEs
  30. 580.@graphql-tools/utils2 CVEs
  31. 581.@hapi/joi2 CVEs
  32. 582.@hapi/wreck2 CVEs
  33. 583.Haraka2 CVEs
  34. 584.harp2 CVEs
  35. 585.hashbrown-cms2 CVEs
  36. 586.hashi-vault-js2 CVEs
  37. 587.hawk2 CVEs
  38. 588.@haxtheweb/open-apis2 CVEs
  39. 589.@haxtheweb/video-player2 CVEs
  40. 590.hekto2 CVEs
  41. 591.hellojs2 CVEs
  42. 592.hexo2 CVEs
  43. 593.@highcharts/grid-lite2 CVEs
  44. 594.hoek2 CVEs
  45. 595.html-janitor2 CVEs
  46. 596.html-pages2 CVEs
  47. 597.http-cache-semantics2 CVEs
  48. 598.http-file-server2 CVEs
  49. 599.http-live-simulator2 CVEs
  50. 600.@hulumi/drift2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →