npm Package Vulnerabilities

All 3,018 JavaScript / Node.js packages with known CVEs, ranked by live CVE volume — 7,323 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1,601.haml-coffee1 CVE
  2. 1,602.handsontable1 CVE
  3. 1,603.hapi-auth-jwt21 CVE
  4. 1,604.@hapi/hoek1 CVE
  5. 1,605.@hapi/inert1 CVE
  6. 1,606.haxe1 CVE
  7. 1,607.haxe31 CVE
  8. 1,608.haxe-dev1 CVE
  9. 1,609.haxeshim1 CVE
  10. 1,610.@haxtheweb/iframe-loader1 CVE
  11. 1,611.hbs1 CVE
  12. 1,612.hcbserver1 CVE
  13. 1,613.headless-browser-lite1 CVE
  14. 1,614.healthcenter1 CVE
  15. 1,615.hemmelig1 CVE
  16. 1,616.herbivore1 CVE
  17. 1,617.heroku-addonpool1 CVE
  18. 1,618.heroku-env1 CVE
  19. 1,619.hexo-admin1 CVE
  20. 1,620.hexo-theme-anzhiyu1 CVE
  21. 1,621.@hey-api/openapi-ts1 CVE
  22. 1,622.hfs1 CVE
  23. 1,623.hftp1 CVE
  24. 1,624.highlight.js1 CVE
  25. 1,625.highlight.run1 CVE
  26. 1,626.@hono/oauth-providers1 CVE
  27. 1,627.hoolock1 CVE
  28. 1,628.@hoppscotch/cli1 CVE
  29. 1,629.hosted-git-info1 CVE
  30. 1,630.hostr1 CVE
  31. 1,631.hot-formula-parser1 CVE
  32. 1,632.@hotwired/turbo1 CVE
  33. 1,633.@hpke/core1 CVE
  34. 1,634.html2pdf.js1 CVE
  35. 1,635.html-minifier1 CVE
  36. 1,636.html-parse-stringify1 CVE
  37. 1,637.html-parse-stringify21 CVE
  38. 1,638.html-pdf1 CVE
  39. 1,639.http-proxy1 CVE
  40. 1,640.http-proxy-agent1 CVE
  41. 1,641.http-proxy.js1 CVE
  42. 1,642.http_server1 CVE
  43. 1,643.http-server-node1 CVE
  44. 1,644.http-signature1 CVE
  45. 1,645.https-proxy-agent1 CVE
  46. 1,646.http_static_simple1 CVE
  47. 1,647.httpster1 CVE
  48. 1,648.httpsync1 CVE
  49. 1,649.hubl-server1 CVE
  50. 1,650.hubot-scripts1 CVE

Which npm packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →