npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 801.vega-selections2 CVEs
  2. 802.velocityjs2 CVEs
  3. 803.@vitejs/plugin-rsc2 CVEs
  4. 804.vxe-table2 CVEs
  5. 805.waku2 CVEs
  6. 806.webpack-dev-middleware2 CVEs
  7. 807.websocket-driver2 CVEs
  8. 808.whistle2 CVEs
  9. 809.@whyour/qinglong2 CVEs
  10. 810.@wonderwhy-er/desktop-commander2 CVEs
  11. 811.@workos-inc/authkit-remix2 CVEs
  12. 812.@xhmikosr/decompress2 CVEs
  13. 813.xmlhttprequest-ssl2 CVEs
  14. 814.yaml2 CVEs
  15. 815.zx2 CVEs
  16. 816.1011 CVE
  17. 817.11xiaoli1 CVE
  18. 818.22lixian1 CVE
  19. 819.360class.jansenhm1 CVE
  20. 820.6261 CVE
  21. 821.@75lb/deep-merge1 CVE
  22. 822.a11y-mcp1 CVE
  23. 823.@a2ui/web_core1 CVE
  24. 824.abacus-ext-cmdline1 CVE
  25. 825.@absolunet/kafe1 CVE
  26. 826.@abw/badger-database1 CVE
  27. 827.@acastellon/auth1 CVE
  28. 828.accesslog1 CVE
  29. 829.access-policy1 CVE
  30. 830.@acrontum/filesystem-template1 CVE
  31. 831.@actions/artifact1 CVE
  32. 832.@actions/http-client1 CVE
  33. 833.actual1 CVE
  34. 834.@actual-app/cli1 CVE
  35. 835.@actual-app/web1 CVE
  36. 836.adamvr-geoip-lite1 CVE
  37. 837.adb-driver1 CVE
  38. 838.adb-mcp1 CVE
  39. 839.@adolph_dudu/ratio-swiper1 CVE
  40. 840.@adonisjs/core1 CVE
  41. 841.@adonisjs/lucid1 CVE
  42. 842.@aedart/support1 CVE
  43. 843.aerospike1 CVE
  44. 844.agentic-flow1 CVE
  45. 845.@agenticmail/claudecode1 CVE
  46. 846.@agenticmail/codex1 CVE
  47. 847.@agenticmail/mcp1 CVE
  48. 848.@agenticmail/openclaw1 CVE
  49. 849.ag-grid1 CVE
  50. 850.@ag-grid-enterprise/charts1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →