npm Package Vulnerabilities
All 2,703 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 5,753 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.
- 1,551.jstestdriver1 CVE
- 1,552.js-video-url-parser1 CVE
- 1,553.@jswork/next-npm-version1 CVE
- 1,554.@jupyterlab/git1 CVE
- 1,555.@jupyterlab/help-extension1 CVE
- 1,556.@jupyter-notebook/help-extension1 CVE
- 1,557.just-extend1 CVE
- 1,558.just-safe-set1 CVE
- 1,559.jvminstall1 CVE
- 1,560.jws1 CVE
- 1,561.jwt-simple1 CVE
- 1,562.karma-mojo1 CVE
- 1,563.keep-module-latest1 CVE
- 1,564.kerberos1 CVE
- 1,565.keycloak-js1 CVE
- 1,566.@keycloak/keycloak-admin-client1 CVE
- 1,567.keypair1 CVE
- 1,568.@keystonejs/keystone1 CVE
- 1,569.@keystone-next/auth1 CVE
- 1,570.kibana1 CVE
- 1,571.kill-by-port1 CVE
- 1,572.killing1 CVE
- 1,573.killport1 CVE
- 1,574.kill-port1 CVE
- 1,575.kill-port-process1 CVE
- 1,576.kill-process-by-name1 CVE
- 1,577.kill-process-on-port1 CVE
- 1,578.@kilocode/cli1 CVE
- 1,579.kindlegen1 CVE
- 1,580.kind-of1 CVE
- 1,581.kiota-typescript1 CVE
- 1,582.kityminder1 CVE
- 1,583.klona1 CVE
- 1,584.knightjs1 CVE
- 1,585.@knight-lab/timelinejs1 CVE
- 1,586.knockout1 CVE
- 1,587.knwl.js1 CVE
- 1,588.@koa/cors1 CVE
- 1,589.koa-remove-trailing-slashes1 CVE
- 1,590.@koa/router1 CVE
- 1,591.kongadmin1 CVE
- 1,592.@kottster/server1 CVE
- 1,593.kubectl-mcp-server1 CVE
- 1,594.kurwov1 CVE
- 1,595.@kyivstarteam/react-native-sms-user-consent1 CVE
- 1,596.lab6.brit951 CVE
- 1,597.lab6drewfusbyu1 CVE
- 1,598.@lambda-middleware/json-deserializer1 CVE
- 1,599.@langchain/core1 CVE
- 1,600.@langchain/langgraph-checkpoint-mongodb1 CVE
Which npm packages run in YOUR stack?
EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.
Start Free Scan →