npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 751.snyk-gradle-plugin2 CVEs
  2. 752.socket.io-file2 CVEs
  3. 753.sockjs2 CVEs
  4. 754.@solana/web3.js2 CVEs
  5. 755.sqlite32 CVEs
  6. 756.squirrelly2 CVEs
  7. 757.ssrfcheck2 CVEs
  8. 758.ssri2 CVEs
  9. 759.st2 CVEs
  10. 760.@stablelib/cbor2 CVEs
  11. 761.statics-server2 CVEs
  12. 762.status-board2 CVEs
  13. 763.@storybook/addon-mcp2 CVEs
  14. 764.@storybook/addon-vitest2 CVEs
  15. 765.@storybook/core2 CVEs
  16. 766.@storybook/core-server2 CVEs
  17. 767.@storybook/experimental-addon-test2 CVEs
  18. 768.@strapi/database2 CVEs
  19. 769.@strikeentco/set2 CVEs
  20. 770.sublinear-time-solver2 CVEs
  21. 771.summernote2 CVEs
  22. 772.suneditor2 CVEs
  23. 773.@sveltejs/adapter-node2 CVEs
  24. 774.swiper2 CVEs
  25. 775.@tak-ps/cloudtak2 CVEs
  26. 776.@tanstack/react-start2 CVEs
  27. 777.@tanstack/solid-start2 CVEs
  28. 778.@tanstack/start-server-core2 CVEs
  29. 779.@tanstack/vue-start2 CVEs
  30. 780.@theia/ai-ide2 CVEs
  31. 781.@theia/mini-browser2 CVEs
  32. 782.thrift2 CVEs
  33. 783.@tinacms/app2 CVEs
  34. 784.tinypool2 CVEs
  35. 785.tiny-secp256k12 CVEs
  36. 786.tree-kill2 CVEs
  37. 787.tree-kit2 CVEs
  38. 788.@trpc/server2 CVEs
  39. 789.@tryghost/portal2 CVEs
  40. 790.tryton-sao2 CVEs
  41. 791.ts-deepmerge2 CVEs
  42. 792.turbo2 CVEs
  43. 793.uglify-js2 CVEs
  44. 794.@umbraco-cms/backoffice2 CVEs
  45. 795.underscore2 CVEs
  46. 796.ungit2 CVEs
  47. 797.uploadfs2 CVEs
  48. 798.useragent2 CVEs
  49. 799.utils-extend2 CVEs
  50. 800.valibot2 CVEs

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →