npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,151.cmake1 CVE
  2. 1,152.cobalt-cli1 CVE
  3. 1,153.co-cli-installer1 CVE
  4. 1,154.cocotais-bot1 CVE
  5. 1,155.codeceptjs1 CVE
  6. 1,156.codemirror1 CVE
  7. 1,157.codem-transcode1 CVE
  8. 1,158.@coding-solo/godot-mcp1 CVE
  9. 1,159.cofeescript1 CVE
  10. 1,160.cofee-script1 CVE
  11. 1,161.coffescript1 CVE
  12. 1,162.coffe-script1 CVE
  13. 1,163.collection.js1 CVE
  14. 1,164.color1 CVE
  15. 1,165.color-convert1 CVE
  16. 1,166.colord1 CVE
  17. 1,167.color-name1 CVE
  18. 1,168.colors1 CVE
  19. 1,169.comb1 CVE
  20. 1,170.commandkit1 CVE
  21. 1,171.commentapp.stetsonwood1 CVE
  22. 1,172.commonregex1 CVE
  23. 1,173.compass-compile1 CVE
  24. 1,174.compile-sass1 CVE
  25. 1,175.component-flatten1 CVE
  26. 1,176.compression1 CVE
  27. 1,177.conf-cfg-ini1 CVE
  28. 1,178.config-handler1 CVE
  29. 1,179.config-shield1 CVE
  30. 1,180.confinit1 CVE
  31. 1,181.@conform-to/yup1 CVE
  32. 1,182.@conform-to/zod1 CVE
  33. 1,183.confucious1 CVE
  34. 1,184.connection-tester1 CVE
  35. 1,185.connect-multiparty1 CVE
  36. 1,186.connect-pg-simple1 CVE
  37. 1,187.connie-lang1 CVE
  38. 1,188.consciousness-explorer1 CVE
  39. 1,189.console-io1 CVE
  40. 1,190.@contentful/mcp-server1 CVE
  41. 1,191.@contentful/mcp-tools1 CVE
  42. 1,192.content-security-policy-parser1 CVE
  43. 1,193.ContentTools1 CVE
  44. 1,194.controlled-merge1 CVE
  45. 1,195.@conventional-changelog/git-client1 CVE
  46. 1,196.convert-svg-to-jpeg1 CVE
  47. 1,197.convert-svg-to-png1 CVE
  48. 1,198.cookie1 CVE
  49. 1,199.cookie-encrypter1 CVE
  50. 1,200.cookiejar1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →