npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 901.@apollo/composition1 CVE
  2. 902.@apollo/experimental-nextjs-app-support1 CVE
  3. 903.@apollo/explorer1 CVE
  4. 904.@apollo/federation-internals1 CVE
  5. 905.@apollo/sandbox1 CVE
  6. 906.@apollo/server1 CVE
  7. 907.apollo-server1 CVE
  8. 908.@apollosproject/data-connector-rock1 CVE
  9. 909.@apostrophecms/ai-helper1 CVE
  10. 910.@apostrophecms/cli1 CVE
  11. 911.@apostrophecms/db-connect1 CVE
  12. 912.@apostrophecms/login-hcaptcha1 CVE
  13. 913.@apostrophecms/login-recaptcha1 CVE
  14. 914.@apostrophecms/passport-bridge1 CVE
  15. 915.@apostrophecms/seo1 CVE
  16. 916.@apphp/object-resolver1 CVE
  17. 917.@appium/base-driver1 CVE
  18. 918.appium-chromedriver1 CVE
  19. 919.appium-desktop1 CVE
  20. 920.appium-mcp1 CVE
  21. 921.appwrite-cli1 CVE
  22. 922.arcanist1 CVE
  23. 923.argencoders-notevil1 CVE
  24. 924.@argos-ci/core1 CVE
  25. 925.arrayfire-js1 CVE
  26. 926.arr-flatten-unflatten1 CVE
  27. 927.asciitable.js1 CVE
  28. 928.@astrojs/rss1 CVE
  29. 929.@astrojs/svelte1 CVE
  30. 930.async1 CVE
  31. 931.@asyncapi/java-spring-cloud-stream-template1 CVE
  32. 932.@asyncapi/modelina1 CVE
  33. 933.atlasboard1 CVE
  34. 934.@atlaskit/editor-core1 CVE
  35. 935.atlassian-connect-express1 CVE
  36. 936.atob1 CVE
  37. 937.atom-node-module-installer1 CVE
  38. 938.audify1 CVE
  39. 939.augustine1 CVE
  40. 940.aurelia-framework1 CVE
  41. 941.aurelia-path1 CVE
  42. 942.auth01 CVE
  43. 943.auth-fetch-mcp1 CVE
  44. 944.automagik-genie1 CVE
  45. 945.@aws/agentcore1 CVE
  46. 946.@aws-amplify/cli1 CVE
  47. 947.@aws-amplify/codegen-ui-react1 CVE
  48. 948.@aws-cdk/aws-eks1 CVE
  49. 949.aws-lambda1 CVE
  50. 950.aws-lambda-multipart-parser1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →