npm Package Vulnerabilities

All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,742 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,401.@hapi/inert1 CVE
  2. 1,402.haxe1 CVE
  3. 1,403.haxe31 CVE
  4. 1,404.haxe-dev1 CVE
  5. 1,405.haxeshim1 CVE
  6. 1,406.@haxtheweb/iframe-loader1 CVE
  7. 1,407.hbs1 CVE
  8. 1,408.hcbserver1 CVE
  9. 1,409.headless-browser-lite1 CVE
  10. 1,410.healthcenter1 CVE
  11. 1,411.hemmelig1 CVE
  12. 1,412.herbivore1 CVE
  13. 1,413.heroku-addonpool1 CVE
  14. 1,414.heroku-env1 CVE
  15. 1,415.hexo-admin1 CVE
  16. 1,416.hexo-theme-anzhiyu1 CVE
  17. 1,417.@hey-api/openapi-ts1 CVE
  18. 1,418.hfs1 CVE
  19. 1,419.hftp1 CVE
  20. 1,420.highlight.js1 CVE
  21. 1,421.highlight.run1 CVE
  22. 1,422.hoolock1 CVE
  23. 1,423.@hoppscotch/cli1 CVE
  24. 1,424.hosted-git-info1 CVE
  25. 1,425.hostr1 CVE
  26. 1,426.hot-formula-parser1 CVE
  27. 1,427.@hotwired/turbo1 CVE
  28. 1,428.@hpke/core1 CVE
  29. 1,429.html2pdf.js1 CVE
  30. 1,430.html-minifier1 CVE
  31. 1,431.html-parse-stringify1 CVE
  32. 1,432.html-parse-stringify21 CVE
  33. 1,433.html-pdf1 CVE
  34. 1,434.http-cache-semantics1 CVE
  35. 1,435.http-proxy1 CVE
  36. 1,436.http-proxy-agent1 CVE
  37. 1,437.http-proxy.js1 CVE
  38. 1,438.http_server1 CVE
  39. 1,439.http-server-node1 CVE
  40. 1,440.http-signature1 CVE
  41. 1,441.https-proxy-agent1 CVE
  42. 1,442.http_static_simple1 CVE
  43. 1,443.httpster1 CVE
  44. 1,444.httpsync1 CVE
  45. 1,445.hubl-server1 CVE
  46. 1,446.hubot-scripts1 CVE
  47. 1,447.@hulumi/drift1 CVE
  48. 1,448.hydrooj1 CVE
  49. 1,449.i1 CVE
  50. 1,450.i18next-http-backend1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →