npm Package Vulnerabilities

All 2,702 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,723 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 851.bootstrap-multiselect1 CVE
  2. 852.bootstrap-select1 CVE
  3. 853.bostr1 CVE
  4. 854.botbait1 CVE
  5. 855.botframework-connector1 CVE
  6. 856.bower1 CVE
  7. 857.box2d-native1 CVE
  8. 858.bracket-template1 CVE
  9. 859.braft-editor1 CVE
  10. 860.@brikcss/merge1 CVE
  11. 861.broccoli-closure1 CVE
  12. 862.broccoli-compass1 CVE
  13. 863.browserify-hmr1 CVE
  14. 864.browserify-sign1 CVE
  15. 865.browserless-chrome1 CVE
  16. 866.browserslist1 CVE
  17. 867.browserstack-local1 CVE
  18. 868.bsock1 CVE
  19. 869.bson-objectid1 CVE
  20. 870.@bsv/sdk1 CVE
  21. 871.@budibase/bbui1 CVE
  22. 872.@budibase/builder1 CVE
  23. 873.builder-util-runtime1 CVE
  24. 874.bun1 CVE
  25. 875.buns1 CVE
  26. 876.@bunt/app1 CVE
  27. 877.buttercms1 CVE
  28. 878.buttercup1 CVE
  29. 879.bwm-ng1 CVE
  30. 880.byucslabsix1 CVE
  31. 881.calipso1 CVE
  32. 882.call1 CVE
  33. 883.calmquist.static-server1 CVE
  34. 884.canvas1 CVE
  35. 885.canvg1 CVE
  36. 886.caolilinode1 CVE
  37. 887.@capgo/capacitor-native-biometric1 CVE
  38. 888.@capgo/cli1 CVE
  39. 889.@cap-js/db-service1 CVE
  40. 890.@cap-js/postgres1 CVE
  41. 891.@cap-js/sqlite1 CVE
  42. 892.carbone1 CVE
  43. 893.@casl/ability1 CVE
  44. 894.casperjs1 CVE
  45. 895.cassproject1 CVE
  46. 896.@cat5th/key-serializer1 CVE
  47. 897.cattown1 CVE
  48. 898.cdk1 CVE
  49. 899.cd-messenger1 CVE
  50. 900.@cdr0/sg1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →