npm Package Vulnerabilities

All 2,701 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,719 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 651.underscore2 CVEs
  2. 652.useragent2 CVEs
  3. 653.utils-extend2 CVEs
  4. 654.uuid2 CVEs
  5. 655.vega-selections2 CVEs
  6. 656.@vendure/core2 CVEs
  7. 657.@vitejs/plugin-rsc2 CVEs
  8. 658.vitest2 CVEs
  9. 659.vxe-table2 CVEs
  10. 660.waku2 CVEs
  11. 661.websocket-driver2 CVEs
  12. 662.@wonderwhy-er/desktop-commander2 CVEs
  13. 663.@workos-inc/authkit-remix2 CVEs
  14. 664.xmlhttprequest-ssl2 CVEs
  15. 665.yaml2 CVEs
  16. 666.zx2 CVEs
  17. 667.1011 CVE
  18. 668.11xiaoli1 CVE
  19. 669.22lixian1 CVE
  20. 670.360class.jansenhm1 CVE
  21. 671.6261 CVE
  22. 672.@75lb/deep-merge1 CVE
  23. 673.a11y-mcp1 CVE
  24. 674.abacus-ext-cmdline1 CVE
  25. 675.@absolunet/kafe1 CVE
  26. 676.@abw/badger-database1 CVE
  27. 677.@acastellon/auth1 CVE
  28. 678.accesslog1 CVE
  29. 679.access-policy1 CVE
  30. 680.@acrontum/filesystem-template1 CVE
  31. 681.@actions/artifact1 CVE
  32. 682.@actions/http-client1 CVE
  33. 683.actual1 CVE
  34. 684.@actual-app/cli1 CVE
  35. 685.@actual-app/web1 CVE
  36. 686.adamvr-geoip-lite1 CVE
  37. 687.adb-driver1 CVE
  38. 688.adb-mcp1 CVE
  39. 689.@adolph_dudu/ratio-swiper1 CVE
  40. 690.@adonisjs/core1 CVE
  41. 691.@adonisjs/http-server1 CVE
  42. 692.@adonisjs/lucid1 CVE
  43. 693.@aedart/support1 CVE
  44. 694.aerospike1 CVE
  45. 695.agentic-flow1 CVE
  46. 696.@agenticmail/claudecode1 CVE
  47. 697.@agenticmail/codex1 CVE
  48. 698.@agenticmail/mcp1 CVE
  49. 699.@agenticmail/openclaw1 CVE
  50. 700.ag-grid1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →