npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,736 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 951.@clerk/react1 CVE
  2. 952.@clerk/remix1 CVE
  3. 953.@clerk/vue1 CVE
  4. 954.clevertap-cordova1 CVE
  5. 955.cli1 CVE
  6. 956.@clickbar/dot-diver1 CVE
  7. 957.client-certificate-auth1 CVE
  8. 958.cline1 CVE
  9. 959.closurecompiler1 CVE
  10. 960.closure-compiler-stream1 CVE
  11. 961.closure-util1 CVE
  12. 962.@cloudflare/vite-plugin1 CVE
  13. 963.cloudinary1 CVE
  14. 964.cloudpub-redis1 CVE
  15. 965.cmake1 CVE
  16. 966.cobalt-cli1 CVE
  17. 967.co-cli-installer1 CVE
  18. 968.cocotais-bot1 CVE
  19. 969.codeceptjs1 CVE
  20. 970.codemirror1 CVE
  21. 971.codem-transcode1 CVE
  22. 972.@coding-solo/godot-mcp1 CVE
  23. 973.cofeescript1 CVE
  24. 974.cofee-script1 CVE
  25. 975.coffescript1 CVE
  26. 976.coffe-script1 CVE
  27. 977.collection.js1 CVE
  28. 978.color1 CVE
  29. 979.color-convert1 CVE
  30. 980.color-name1 CVE
  31. 981.colors1 CVE
  32. 982.comb1 CVE
  33. 983.commandkit1 CVE
  34. 984.commentapp.stetsonwood1 CVE
  35. 985.commonregex1 CVE
  36. 986.compass-compile1 CVE
  37. 987.compile-sass1 CVE
  38. 988.component-flatten1 CVE
  39. 989.conf-cfg-ini1 CVE
  40. 990.config-handler1 CVE
  41. 991.config-shield1 CVE
  42. 992.confinit1 CVE
  43. 993.@conform-to/yup1 CVE
  44. 994.@conform-to/zod1 CVE
  45. 995.confucious1 CVE
  46. 996.connection-tester1 CVE
  47. 997.connect-multiparty1 CVE
  48. 998.connect-pg-simple1 CVE
  49. 999.connie-lang1 CVE
  50. 1,000.console-io1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →