npm Package Vulnerabilities
All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 651.@microsoft/aspire-cli-linux-arm642 CVEs
- 652.@microsoft/aspire-cli-linux-musl-x642 CVEs
- 653.@microsoft/aspire-cli-linux-x642 CVEs
- 654.@microsoft/aspire-cli-osx-arm642 CVEs
- 655.@microsoft/aspire-cli-osx-x642 CVEs
- 656.@mikro-orm/core2 CVEs
- 657.minimist2 CVEs
- 658.misskey-js2 CVEs
- 659.mixin-deep2 CVEs
- 660.mjml2 CVEs
- 661.mlflow2 CVEs
- 662.@mobilenext/mobile-mcp2 CVEs
- 663.@modelcontextprotocol/client2 CVEs
- 664.@modelcontextprotocol/inspector2 CVEs
- 665.@modelcontextprotocol/server-filesystem2 CVEs
- 666.mootools2 CVEs
- 667.mout2 CVEs
- 668.mpath2 CVEs
- 669.mqtt2 CVEs
- 670.mqtt-packet2 CVEs
- 671.ms2 CVEs
- 672.m-server2 CVEs
- 673.msrcrypto2 CVEs
- 674.multi-ini2 CVEs
- 675.mversion2 CVEs
- 676.mysql2 CVEs
- 677.@nestjs/core2 CVEs
- 678.@nestjs/microservices2 CVEs
- 679.netmask2 CVEs
- 680.next-tinacms-azure2 CVEs
- 681.@nguniversal/common2 CVEs
- 682.nitro2 CVEs
- 683.nitropack2 CVEs
- 684.@nocobase/plugin-collection-sql2 CVEs
- 685.@node-red/runtime2 CVEs
- 686.@node-saml/passport-saml2 CVEs
- 687.@npmcli/arborist2 CVEs
- 688.@nubosoftware/node-static2 CVEs
- 689.nunjucks2 CVEs
- 690.nuxt-api-party2 CVEs
- 691.@nx/azure-cache2 CVEs
- 692.@oakserver/oak2 CVEs
- 693.oauth2-server2 CVEs
- 694.@ooples/token-optimizer-mcp2 CVEs
- 695.@openai/codex2 CVEs
- 696.@openc3/tool-common2 CVEs
- 697.opencc2 CVEs
- 698.@openclaw/voice-call2 CVEs
- 699.opencode-ai2 CVEs
- 700.openlearnx2 CVEs
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Book a Demo →