npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,736 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,001.content1 CVE
  2. 1,002.content-security-policy-parser1 CVE
  3. 1,003.ContentTools1 CVE
  4. 1,004.controlled-merge1 CVE
  5. 1,005.@conventional-changelog/git-client1 CVE
  6. 1,006.convert-svg-to-jpeg1 CVE
  7. 1,007.convert-svg-to-png1 CVE
  8. 1,008.cookie1 CVE
  9. 1,009.cookie-encrypter1 CVE
  10. 1,010.cookiejar1 CVE
  11. 1,011.cookie-signature1 CVE
  12. 1,012.@cookiex/deep1 CVE
  13. 1,013.cool-path1 CVE
  14. 1,014.copilot-api1 CVE
  15. 1,015.copy-props1 CVE
  16. 1,016.cordova-android1 CVE
  17. 1,017.cordova-plugin-fingerprint-aio1 CVE
  18. 1,018.cordova-plugin-ionic-webview1 CVE
  19. 1,019.corenlp-js-interface1 CVE
  20. 1,020.corenlp-js-prefab1 CVE
  21. 1,021.cors-anywhere1 CVE
  22. 1,022.counterpart1 CVE
  23. 1,023.coursevault-preview1 CVE
  24. 1,024.create-choo-app31 CVE
  25. 1,025.create-choo-electron1 CVE
  26. 1,026.critters1 CVE
  27. 1,027.crossenv1 CVE
  28. 1,028.cross-env.js1 CVE
  29. 1,029.cross-spawn1 CVE
  30. 1,030.cruddl1 CVE
  31. 1,031.crud-query-parser1 CVE
  32. 1,032.crumb1 CVE
  33. 1,033.cryo1 CVE
  34. 1,034.cryptiles1 CVE
  35. 1,035.crypto-es1 CVE
  36. 1,036.cryptpad1 CVE
  37. 1,037.csrf-lite1 CVE
  38. 1,038.csvjson1 CVE
  39. 1,039.csv-parse1 CVE
  40. 1,040.csvtojson1 CVE
  41. 1,041.cuciuci1 CVE
  42. 1,042.cue-sdk-node1 CVE
  43. 1,043.cumulative-distribution-function1 CVE
  44. 1,044.curling1 CVE
  45. 1,045.curljs1 CVE
  46. 1,046.curlrequest1 CVE
  47. 1,047.curly-bracket-parser1 CVE
  48. 1,048.curses1 CVE
  49. 1,049.@curveball/a12n-server1 CVE
  50. 1,050.@cyanheads/git-mcp-server1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →