npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,739 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,201.ewgaddis.lab61 CVE
  2. 1,202.exceljs1 CVE
  3. 1,203.exec-local-bin1 CVE
  4. 1,204.@executeautomation/database-server1 CVE
  5. 1,205.exiftool-vendored1 CVE
  6. 1,206.expand-hash1 CVE
  7. 1,207.expand-object1 CVE
  8. 1,208.express-handlebars1 CVE
  9. 1,209.express-hbs1 CVE
  10. 1,210.express-jwt1 CVE
  11. 1,211.express-mock-middleware1 CVE
  12. 1,212.express-param1 CVE
  13. 1,213.express-restify-mongoose1 CVE
  14. 1,214.express-validators1 CVE
  15. 1,215.extend1 CVE
  16. 1,216.extend21 CVE
  17. 1,217.external-svg-loader1 CVE
  18. 1,218.exxxxxxxxxxx1 CVE
  19. 1,219.f2e-server1 CVE
  20. 1,220.@fabiocaccamo/utils.js1 CVE
  21. 1,221.fabric-js1 CVE
  22. 1,222.fancy-server1 CVE
  23. 1,223.@farmfe/core1 CVE
  24. 1,224.fast-csv1 CVE
  25. 1,225.@fast-csv/parse1 CVE
  26. 1,226.fastest-json-copy1 CVE
  27. 1,227.fast-http1 CVE
  28. 1,228.fast-http-cli1 CVE
  29. 1,229.@fastify/accepts-serializer1 CVE
  30. 1,230.@fastify/bearer-auth1 CVE
  31. 1,231.fastify-bearer-auth1 CVE
  32. 1,232.@fastify/csrf-protection1 CVE
  33. 1,233.@fastify/http-proxy1 CVE
  34. 1,234.fastify-http-proxy1 CVE
  35. 1,235.@fastify/oauth21 CVE
  36. 1,236.fastify-reply-from1 CVE
  37. 1,237.@fastify/secure-session1 CVE
  38. 1,238.@fastify/session1 CVE
  39. 1,239.@fastify/swagger-ui1 CVE
  40. 1,240.@fastify/websocket1 CVE
  41. 1,241.fastify-websocket1 CVE
  42. 1,242.fast-json-patch1 CVE
  43. 1,243.fast-loops1 CVE
  44. 1,244.fast-redact1 CVE
  45. 1,245.fbr-client1 CVE
  46. 1,246.@feathersjs/authentication-oauth1 CVE
  47. 1,247.@feathersjs/commons1 CVE
  48. 1,248.@feathersjs/socketio1 CVE
  49. 1,249.@feathersjs/transport-commons1 CVE
  50. 1,250.ffmepg1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →