npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 701.@openzeppelin/wizard2 CVEs
  2. 702.@orval/core2 CVEs
  3. 703.outray2 CVEs
  4. 704.pannellum2 CVEs
  5. 705.parse2 CVEs
  6. 706.@payloadcms/plugin-multi-tenant2 CVEs
  7. 707.@payloadcms/storage-s32 CVEs
  8. 708.pdfmake2 CVEs
  9. 709.@pdfme/common2 CVEs
  10. 710.picomatch2 CVEs
  11. 711.pidusage2 CVEs
  12. 712.piscina2 CVEs
  13. 713.plotly.js2 CVEs
  14. 714.postcss-selector-parser2 CVEs
  15. 715.private-ip2 CVEs
  16. 716.pug2 CVEs
  17. 717.pug-code-gen2 CVEs
  18. 718.putil-merge2 CVEs
  19. 719.querymen2 CVEs
  20. 720.quill2 CVEs
  21. 721.react-draft-wysiwyg2 CVEs
  22. 722.realms-shim2 CVEs
  23. 723.@remix-run/react2 CVEs
  24. 724.@remix-run/router2 CVEs
  25. 725.remotion2 CVEs
  26. 726.replicator2 CVEs
  27. 727.repomix2 CVEs
  28. 728.request2 CVEs
  29. 729.request-filtering-agent2 CVEs
  30. 730.reveal.js2 CVEs
  31. 731.rollbar2 CVEs
  32. 732.rollup2 CVEs
  33. 733.rollup-plugin-server2 CVEs
  34. 734.rwsdk2 CVEs
  35. 735.schema-inspector2 CVEs
  36. 736.scim-patch2 CVEs
  37. 737.scratch-svg-renderer2 CVEs
  38. 738.sds2 CVEs
  39. 739.semantic-release2 CVEs
  40. 740.semver2 CVEs
  41. 741.semver-regex2 CVEs
  42. 742.@sentry/astro2 CVEs
  43. 743.serialize-to-js2 CVEs
  44. 744.serve-lite2 CVEs
  45. 745.serve-static2 CVEs
  46. 746.ses2 CVEs
  47. 747.set-value2 CVEs
  48. 748.shiba2 CVEs
  49. 749.@sigstore/oci2 CVEs
  50. 750.simditor2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →