npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,051.bsock1 CVE
  2. 1,052.bson-objectid1 CVE
  3. 1,053.@bsv/sdk1 CVE
  4. 1,054.@bsv/wallet-toolbox1 CVE
  5. 1,055.@bsv/wallet-toolbox-client1 CVE
  6. 1,056.@bsv/wallet-toolbox-mobile1 CVE
  7. 1,057.@budibase/bbui1 CVE
  8. 1,058.@budibase/builder1 CVE
  9. 1,059.builder-util-runtime1 CVE
  10. 1,060.bun1 CVE
  11. 1,061.buns1 CVE
  12. 1,062.@bunt/app1 CVE
  13. 1,063.buttercms1 CVE
  14. 1,064.buttercup1 CVE
  15. 1,065.bwm-ng1 CVE
  16. 1,066.byucslabsix1 CVE
  17. 1,067.c31 CVE
  18. 1,068.calipso1 CVE
  19. 1,069.call1 CVE
  20. 1,070.calmquist.static-server1 CVE
  21. 1,071.canvas1 CVE
  22. 1,072.canvg1 CVE
  23. 1,073.caolilinode1 CVE
  24. 1,074.@capacitor/android1 CVE
  25. 1,075.@capacitor/ios1 CVE
  26. 1,076.@capgo/capacitor-native-biometric1 CVE
  27. 1,077.@capgo/cli1 CVE
  28. 1,078.@cap-js/db-service1 CVE
  29. 1,079.@cap-js/postgres1 CVE
  30. 1,080.@cap-js/sqlite1 CVE
  31. 1,081.carbone1 CVE
  32. 1,082.@casl/ability1 CVE
  33. 1,083.casperjs1 CVE
  34. 1,084.cassproject1 CVE
  35. 1,085.@cat5th/key-serializer1 CVE
  36. 1,086.cattown1 CVE
  37. 1,087.cdk1 CVE
  38. 1,088.cd-messenger1 CVE
  39. 1,089.@cdr0/sg1 CVE
  40. 1,090.ced1 CVE
  41. 1,091.@cedar-policy/authorization-for-expressjs1 CVE
  42. 1,092.cedipay-core1 CVE
  43. 1,093.censorify.tanisjr1 CVE
  44. 1,094.cezerin1 CVE
  45. 1,095.@chainsafe/libp2p-noise1 CVE
  46. 1,096.@chainsafe/lodestar1 CVE
  47. 1,097.changeset1 CVE
  48. 1,098.charset1 CVE
  49. 1,099.chart.js1 CVE
  50. 1,100.chartkick1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →