npm Package Vulnerabilities

All 2,699 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,703 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.@nestjs/core2 CVEs
  2. 552.netmask2 CVEs
  3. 553.@nguniversal/common2 CVEs
  4. 554.nitro2 CVEs
  5. 555.nitropack2 CVEs
  6. 556.@node-red/runtime2 CVEs
  7. 557.@node-saml/passport-saml2 CVEs
  8. 558.@npmcli/arborist2 CVEs
  9. 559.@nubosoftware/node-static2 CVEs
  10. 560.nunjucks2 CVEs
  11. 561.nuxt-api-party2 CVEs
  12. 562.@nuxt/devtools2 CVEs
  13. 563.@nuxtjs/mdc2 CVEs
  14. 564.@nuxt/nitro-server2 CVEs
  15. 565.@oakserver/oak2 CVEs
  16. 566.oauth2-server2 CVEs
  17. 567.@openai/codex2 CVEs
  18. 568.@openc3/tool-common2 CVEs
  19. 569.opencc2 CVEs
  20. 570.opencode-ai2 CVEs
  21. 571.openlearnx2 CVEs
  22. 572.@orval/core2 CVEs
  23. 573.outray2 CVEs
  24. 574.@paperclipai/server2 CVEs
  25. 575.parse2 CVEs
  26. 576.pbkdf22 CVEs
  27. 577.pdfjs-dist2 CVEs
  28. 578.pdfmake2 CVEs
  29. 579.picomatch2 CVEs
  30. 580.plotly.js2 CVEs
  31. 581.private-ip2 CVEs
  32. 582.@prompty/core2 CVEs
  33. 583.pug2 CVEs
  34. 584.pug-code-gen2 CVEs
  35. 585.putil-merge2 CVEs
  36. 586.querymen2 CVEs
  37. 587.quill2 CVEs
  38. 588.react-dev-utils2 CVEs
  39. 589.react-draft-wysiwyg2 CVEs
  40. 590.realms-shim2 CVEs
  41. 591.@remix-run/react2 CVEs
  42. 592.remotion2 CVEs
  43. 593.replicator2 CVEs
  44. 594.repomix2 CVEs
  45. 595.request2 CVEs
  46. 596.reveal.js2 CVEs
  47. 597.rollbar2 CVEs
  48. 598.rollup2 CVEs
  49. 599.rollup-plugin-server2 CVEs
  50. 600.rwsdk2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →