npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,201.cookie-signature1 CVE
  2. 1,202.@cookiex/deep1 CVE
  3. 1,203.cool-path1 CVE
  4. 1,204.copilot-api1 CVE
  5. 1,205.copy-props1 CVE
  6. 1,206.cordova-android1 CVE
  7. 1,207.cordova-plugin-fingerprint-aio1 CVE
  8. 1,208.cordova-plugin-ionic-webview1 CVE
  9. 1,209.corenlp-js-interface1 CVE
  10. 1,210.corenlp-js-prefab1 CVE
  11. 1,211.cors-anywhere1 CVE
  12. 1,212.counterpart1 CVE
  13. 1,213.coursevault-preview1 CVE
  14. 1,214.create-choo-app31 CVE
  15. 1,215.create-choo-electron1 CVE
  16. 1,216.critters1 CVE
  17. 1,217.crossenv1 CVE
  18. 1,218.cross-env.js1 CVE
  19. 1,219.cross-spawn1 CVE
  20. 1,220.cruddl1 CVE
  21. 1,221.crud-query-parser1 CVE
  22. 1,222.crumb1 CVE
  23. 1,223.cryo1 CVE
  24. 1,224.cryptiles1 CVE
  25. 1,225.crypto-es1 CVE
  26. 1,226.cryptpad1 CVE
  27. 1,227.csrf-lite1 CVE
  28. 1,228.csvjson1 CVE
  29. 1,229.csvtojson1 CVE
  30. 1,230.cuciuci1 CVE
  31. 1,231.cue-sdk-node1 CVE
  32. 1,232.cumulative-distribution-function1 CVE
  33. 1,233.curling1 CVE
  34. 1,234.curljs1 CVE
  35. 1,235.curlrequest1 CVE
  36. 1,236.curly-bracket-parser1 CVE
  37. 1,237.curses1 CVE
  38. 1,238.@curveball/a12n-server1 CVE
  39. 1,239.@cyanheads/git-mcp-server1 CVE
  40. 1,240.cyber-js1 CVE
  41. 1,241.cycle-import-check1 CVE
  42. 1,242.@cyclonedx/cdxgen1 CVE
  43. 1,243.@cyclonedx/cyclonedx-library1 CVE
  44. 1,244.@cyntler/react-doc-viewer1 CVE
  45. 1,245.@cypress/request1 CVE
  46. 1,246.cypserver1 CVE
  47. 1,247.d3.js1 CVE
  48. 1,248.@dadigua/hyperchat1 CVE
  49. 1,249.dagu1 CVE
  50. 1,250.dalek-browser-chrome1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →